summaryrefslogtreecommitdiffstats
path: root/roles/common-web
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2020-05-16 00:52:10 +0200
committerGuilhem Moulin <guilhem@fripost.org>2020-05-16 01:30:44 +0200
commite43ef0c7b9490ece68af38f8a658ad8a710e4e37 (patch)
treef9dedcfa6dee7cfe280aedf10695e73f9ce69962 /roles/common-web
parent38c697083d50764d833adc039b10b203d36c8f56 (diff)
Nextcloud: use dedicated user and PHP FPM pool.
There is a real security gain in not using the 'www-data' user: nginx workers can't read Nextcloud config files and data directory, so should our nginx configuration be insecure a leak is much less likely.
Diffstat (limited to 'roles/common-web')
-rw-r--r--roles/common-web/files/etc/nginx/snippets/fastcgi-php.conf1
1 files changed, 0 insertions, 1 deletions
diff --git a/roles/common-web/files/etc/nginx/snippets/fastcgi-php.conf b/roles/common-web/files/etc/nginx/snippets/fastcgi-php.conf
index 48ebc63..f82bc5d 100644
--- a/roles/common-web/files/etc/nginx/snippets/fastcgi-php.conf
+++ b/roles/common-web/files/etc/nginx/snippets/fastcgi-php.conf
@@ -11,4 +11,3 @@ fastcgi_param PATH_INFO $path_info;
fastcgi_index index.php;
include snippets/fastcgi.conf;
-fastcgi_pass unix:/run/php/php7.3-fpm.sock;