Files @ 17cf34f73ca6
Branch filter:

Location: majic-ansible-roles/roles/php_website/templates/fpm_site.conf.j2

branko
MAR-28: Implemented additional tests for mail_server role:

- Deploy a number of tools on clients in order to test SMTP, IMAP, and Sieve
services.
- Added one more user to LDAP directory for testing group restrictions.
- Deploy CA certificate on all testing machines for TLS validation purposes.
- Use different custom-configured cipher for mail server ciphers.
- Fixed invalid postmaster address for parameters-optional host.
- Deploy configuration files for use with Imap-CLI on client test machines.
- Updated testing of SMTP server to include checks for users that do not belong
to mail group.
- Extended some SMTP-related tests to cover both test servers.
- Some small fixes in SMTP-related tests for expected output from commands.
- Implemented tests covering Dovecot (IMAP + Sieve) functionality.
- Implemented tests for running/enabled services.
- Implemented tests for ClamAV.
- Implemented tests for firewall and connectivity.
- Implemented tests for Postfix TLS configuration.
- TODO: Tests for Sieve TLS configuration have not been written yet due to
limitation of available tools.
; Start a new named pool.
[{{ fqdn }}]

; Set the user and group that should execute the scripts.
user = {{ user }}
group = {{ user }}

; Listen on a dedicated UNIX socket.
listen = /var/run/php5-fpm/{{ fqdn }}.sock

; Set-up UNIX socket permissions (allow web server to connect).
listen.owner = www-data
listen.group = www-data
listen.mode = 0660

; Configure how processes are managed and how many are launched.
pm = dynamic
pm.max_children = 5
pm.start_servers = 2
pm.min_spare_servers = 1
pm.max_spare_servers = 3

; Chdir to this directory at the start.
chdir = /

; Redirect worker stdout/stder into main error log. This will also allow Nginx
; to log errors in site-specific log file.
catch_workers_output = yes

{% for var, val in additional_fpm_config.iteritems() %}
{{ var }} = {{ val }}
{% endfor %}