PHP-FPM
Izmanto PHP-FPM PHP lietotnēm, kamēr Fluxheim servē static assetus un droši pārsūta PHP requestus.
Ārējs PHP-FPM pool
[vhosts.php]
enabled = true
root = "/srv/app/public"
index = "index.php"
[vhosts.php.fpm]
mode = "external"
socket = "/run/php-fpm/app.sock"
Endpoint izvēles
| Režīms | Lieto, kad |
|---|---|
socket | Fluxheim un PHP-FPM darbojas uz viena hosta. |
tcp | PHP-FPM runs in another container or host. |
tcp_upstreams | Vēlies vienkāršu safe-method failover starp PHP-FPM pooliem. |
managed | Fluxheim jāstartē un jāuzrauga privāts PHP-FPM master. |
Managed PHP-FPM
[vhosts.php.fpm]
mode = "managed"
php_fpm_binary = "/usr/sbin/php-fpm"
socket_dir = "/run/fluxheim/php"
workers = 4
process_manager = "dynamic"
start_servers = 2
min_spare_servers = 1
max_spare_servers = 4
Managed mode lets Fluxheim start a private php-fpm master for the vhost. Lieto, kad you want Fluxheim to own the socket and generated pool files.
PHP safety kontroles
- Turi PHP failus konfigurētajā root.
- Kad iespējams, servē static assetus tieši.
- Nekad neatklāj PHP source, ja PHP izpilde neizdodas.
- Liedz PHP izpildi upload direktorijās.
- Izmanto request un response byte limitus neuzticamām lietotnēm.