ansible-roles/php#12 Change PHP-FPM, Apache and Netdata settings

templates/vhost.conf

@@ -31,7 +31,13 @@
   Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
 
 {% if matomo.jail is defined and not php_fpm_socket|default(false) %}
-  ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:{{ matomo.jail.port }}/$1
+  <LocationMatch "/fpm-status">
+    Include /etc/apache2/{{ apache_conf_dir }}/global-deny.conf
+    ProxyPass fcgi://127.0.0.1:{{ matomo.jail.port }}
+  </LocationMatch>
+  <FilesMatch \.php$>
+    SetHandler "proxy:fcgi://127.0.0.1:{{ matomo.jail.port }}"
+  </FilesMatch>
 {% endif %}
 
   DocumentRoot {{ webRoot }}