Make apache, fastcgi and jailkit work together

tasks/apache.yml

@@ -38,3 +38,23 @@
     mode='640'
   with_items: drupal.domains
   when: item.apache_auth is defined
+
+- name: "Ensure CGI Directory"
+  file:
+    path='/var/www/{{ drupal.jail.name }}'
+    state='directory'
+    owner='{{ drupal.jail.name }}'
+    group='{{ drupal.jail.name }}'
+    mode=755
+  when: drupal.jail is defined
+
+- name: "Copy CGI Wrapper Scripts"
+  template:
+    src='fcgid.sh'
+    dest='/var/www/{{ drupal.jail.name }}/fcgid.sh'
+    owner='{{ drupal.jail.name }}'
+    group='{{ drupal.jail.name }}'
+    mode='550'
+  when: drupal.jail is defined
+
+# TODO: chattr -V +i /var/www/{{ drupal.jail.name }}/fcgid.sh

templates/fcgid.sh

+#!/bin/sh
+
+export PHPRC="/etc/php5/cgi"
+exec /usr/bin/php5-cgi

templates/vhost.conf

@@ -23,7 +23,13 @@
 
   DocumentRoot {{ drupalRoot }}
   <Directory {{ drupalRoot }}/>
-    Options Indexes FollowSymLinks MultiViews
+{% if drupal.jail is defined %}
+    FCGIWrapper /var/www/{{ drupal.jail.name }}/fcgid.sh .php
+{% endif %}
+    <FilesMatch \.php$>
+      SetHandler fcgid-script
+    </FilesMatch>
+    Options +ExecCGI +Indexes +FollowSymLinks +MultiViews
     AllowOverride All
 {% if item.apache_auth is defined %}
     AuthType {{ item.apache_auth.type }}