From b6747a645d2627d7672f77fd9d9f301c62c3ccb2 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Thu, 9 Jul 2026 22:42:56 +0300
Subject: Set up freshrss jail

---
 .../templates/usr_local_etc_nginx_nginx.conf       | 44 ++++++++++++++++++++++
 .../templates/usr_local_etc_php_fpm.d_www.conf     | 14 +++++++
 2 files changed, 58 insertions(+)
 create mode 100644 roles/jails/14_freshrss/templates/usr_local_etc_nginx_nginx.conf
 create mode 100644 roles/jails/14_freshrss/templates/usr_local_etc_php_fpm.d_www.conf

(limited to 'roles/jails/14_freshrss/templates')

diff --git a/roles/jails/14_freshrss/templates/usr_local_etc_nginx_nginx.conf b/roles/jails/14_freshrss/templates/usr_local_etc_nginx_nginx.conf
new file mode 100644
index 0000000..f486e13
--- /dev/null
+++ b/roles/jails/14_freshrss/templates/usr_local_etc_nginx_nginx.conf
@@ -0,0 +1,44 @@
+worker_processes auto;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include       mime.types;
+    default_type  application/octet-stream;
+
+    sendfile on;
+    keepalive_timeout 65;
+
+    server {
+        listen 80;
+        server_name freshrss.jan.systems;
+
+        root /var/www;
+        index index.php index.html index.htm;
+
+        access_log /var/log/freshrss.access.log;
+        error_log  /var/log/freshrss.error.log;
+
+        location = /api/pshb.php { deny all; }
+        location ^~ /api/pshb.php/ { deny all; }
+
+        location / {
+            try_files $uri $uri/ /index.php?$query_string;
+        }
+
+        location ~ ^.+?\.php(/.*)?$ {
+            try_files $fastcgi_script_name =404;
+
+            fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
+            fastcgi_split_path_info ^(.+\.php)(/.*)$;
+
+            set $path_info $fastcgi_path_info;
+            fastcgi_param PATH_INFO $path_info;
+
+            include fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+}
diff --git a/roles/jails/14_freshrss/templates/usr_local_etc_php_fpm.d_www.conf b/roles/jails/14_freshrss/templates/usr_local_etc_php_fpm.d_www.conf
new file mode 100644
index 0000000..351470c
--- /dev/null
+++ b/roles/jails/14_freshrss/templates/usr_local_etc_php_fpm.d_www.conf
@@ -0,0 +1,14 @@
+[www]
+user = www
+group = www
+
+listen = /var/run/php/php8.2-fpm.sock
+listen.owner = www
+listen.group = www
+listen.mode = 0660
+
+pm = dynamic
+pm.max_children = 5
+pm.start_servers = 2
+pm.min_spare_servers = 1
+pm.max_spare_servers = 3
-- 
cgit v1.3