add some php limit value

tasks/php-fpm.yml

@@ -18,21 +18,35 @@
 
 - name: "setup  repository - debian"
   block:
-    - name: setup repo key
-      ansible.builtin.get_url:
-        url: https://packages.sury.org/php/apt.gpg
-        dest: /etc/apt/keyrings/sury_php.gpg
+  - name: Check if my_package is installed
+    command: dpkg-query -W debsuryorg-archive-keyring
+    register: my_package_check_deb
+    failed_when: my_package_check_deb.rc > 1
+    changed_when: my_package_check_deb.rc == 1
     
-    - name: setup source list
-      ansible.builtin.template:
+  - name: setup repo key
+    ansible.builtin.get_url:
+      url: https://packages.sury.org/debsuryorg-archive-keyring.deb
+      dest: /tmp/debsuryorg-archive-keyring.deb
+    when: my_package_check_deb.rc==1
+
+  - name: install key
+    ansible.builtin.apt:
+      state: present
+      deb: /tmp/debsuryorg-archive-keyring.deb
+    when: my_package_check_deb.rc==1
+
+
+  - name: setup source list
+    ansible.builtin.template:
         src: php_sury_sources.list
         dest: /etc/apt/sources.list.d/php_sury.sources.list
-      register: repo_setup
+    register: repo_setup
 
-    - name: update cache
-      ansible.builtin.apt:
+  - name: update cache
+    ansible.builtin.apt:
         update_cache: true
-      when: repo_setup.changed
+    when: repo_setup.changed
   when: ansible_os_family | lower == 'debian'
 
 - name: create socket directory if needed
@@ -50,6 +64,7 @@
   ansible.builtin.package:
     name: "{{ php_packages }}"
     state: present
+  when: php_packages is defined
 
 - name: disable default pool
   copy:
@@ -85,4 +100,6 @@
 - name: configure logrotate
   template:
     src: logrotate.conf.jj
-    dest: "/etc/logrotate.d/php-fpm_{{ php_pool_name }}_{{ php_fpm_pool_user }}.conf"
+    dest: "/etc/logrotate.d/php-fpm-{{php_version }}.conf"
+    owner: root
+    group: root

templates/logrotate.conf.jj

@@ -1,12 +1,17 @@
-{{ php_fpm_log_dir }}/php_fpm_{{ php_pool_name }}*.log {
+#{{ ansible_managed }}
+{{ php_fpm_log_dir }}/php_fpm*{{ php_version_nodot }}*.log {
    daily
    rotate 15
    missingok
    notifempty
    sharedscripts
-   postrotate
-      /bin/systemctl reload php{{ php_version }}-php-fpm
-   endscript
+	postrotate
+		if [ -x /usr/lib/php/php{{ php_version }}-fpm-reopenlogs ]; then
+			/usr/lib/php/php{{ php_version }}-fpm-reopenlogs;
+      else
+         /bin/systemctl reload  {{ php_service_name }}
+		fi
+	endscript
 }
 
 

templates/php_apache_config.conf.jj

@@ -1,3 +1,4 @@
+"{{ ansible_managed }}"
 <FilesMatch \.php$>
    SetHandler  "proxy:unix:{{ php_fpm_listen_socket }}|fcgi://localhost/"
 </FilesMatch>

templates/php_sury_sources.list

@@ -1 +1,2 @@
-deb [signed-by=/etc/apt/keyrings/sury_php.gpg] https://packages.sury.org/php/ {{ ansible_distribution_release }} main
+#{{ ansible_managed }}
+deb [signed-by=/etc/apt/trusted.gpg.d/debsuryorg-archive.gpg] https://packages.sury.org/php/ {{ ansible_distribution_release }} main

templates/www.conf

@@ -1,3 +1,4 @@
+;{{ ansible_managed }}
 [{{ php_pool_name }}]
 user = {{ php_fpm_pool_user }}
 group = {{ php_fpm_pool_group }}
@@ -21,3 +22,8 @@ request_slowlog_timeout = 5s
 php_value[session.save_handler] = files
 php_value[session.save_path]    = {{ php_fpm_lib_dir }}/sessions
 php_value[soap.wsdl_cache_dir]  = {{ php_fpm_lib_dir }}/wsdlcache
+php_admin_value[upload_max_filesize] = 64M
+php_admin_value[post_max_size]=64M
+php_admin_value[max_execution_time]=300
+php_admin_value[memory_limit]=512M
+