From 208a9abfc140136345a9bf2070096f946929ba6c Mon Sep 17 00:00:00 2001
From: jurgenhaas <juergen@paragon-es.de>
Date: Thu, 30 Jul 2020 14:10:52 +0200
Subject: [PATCH] ansible-roles/php#12 Change PHP-FPM, Apache and Netdata
 settings

---
 templates/vhost.conf | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/templates/vhost.conf b/templates/vhost.conf
index 86b72ec..aeeae55 100644
--- a/templates/vhost.conf
+++ b/templates/vhost.conf
@@ -31,7 +31,13 @@
   Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
 
 {% if matomo.jail is defined and not php_fpm_socket|default(false) %}
-  ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:{{ matomo.jail.port }}/$1
+  <LocationMatch "/fpm-status">
+    Include /etc/apache2/{{ apache_conf_dir }}/global-deny.conf
+    ProxyPass fcgi://127.0.0.1:{{ matomo.jail.port }}
+  </LocationMatch>
+  <FilesMatch \.php$>
+    SetHandler "proxy:fcgi://127.0.0.1:{{ matomo.jail.port }}"
+  </FilesMatch>
 {% endif %}
 
   DocumentRoot {{ webRoot }}
-- 
GitLab