tasks/oci-7.2.yml

+---
+# file: roles/php/tasks/oci-7.2.yml
+#
+# https://gist.github.com/Yukibashiri/cebaeaccbe531665a5704b1b34a3498e
+
+- name: Check OCI Requirement
+  stat:
+    path: /usr/lib/php/20170718/oci8.so
+  register: oci_file
+
+- block:
+
+    - name: Enable OCI for PHP
+      copy:
+        content: extension={{ item }}.so
+        dest: /etc/{{ php_base_dir }}/{{ php_conf_dir }}/{{ item }}.ini
+        owner: root
+        group: root
+        mode: 0644
+      with_items:
+        - oci8
+
+    - name: Remove possible components in /tmp
+      file:
+        path: /tmp/{{ item }}
+        state: absent
+      with_items:
+        - instantclient_18_5
+        - oracle_x64_18_5_0_0_0_oci8_so_php_7
+
+    - name: Make available Oracle InstantClient
+      command: scp -r {{ repository }}{{ item }} /tmp/
+      become: no
+      with_items:
+        - instantclient_18_5
+        - oracle_x64_18_5_0_0_0_oci8_so_php_7
+
+    - name: Remove /opt/oracle/instantclient_18_5
+      file:
+        path: /opt/oracle/instantclient_18_5
+        state: absent
+
+    - name: Ensure directory /opt/oracle
+      file:
+        path: /opt/oracle
+        state: directory
+
+    - name: Move Oracle InstantClient to /opt/oracle
+      command: mv /tmp/instantclient_18_5 /opt/oracle/instantclient_18_5
+
+    - name: Move oci8 to /usr/lib/php
+      command: mv /tmp/oracle_x64_18_5_0_0_0_oci8_so_php_7 /usr/lib/php/20170718/oci8.so
+
+    - name: Change ownership for Oracle InstantClient
+      file:
+        path: '{{ item }}'
+        owner: root
+        group: root
+        recurse: yes
+        follow: no
+      with_items:
+        - /opt/oracle/instantclient_18_5
+
+    - name: Ensure log directories
+      file:
+        path: /opt/oracle/instantclient_18_5/log/diag/clients
+        owner: www-data
+        group: root
+        state: directory
+        mode: 0775
+        follow: no
+
+    - name: Set permissions in log directories
+      file:
+        path: /opt/oracle/instantclient_18_5/log
+        owner: www-data
+        group: root
+        mode: 0775
+        recurse: yes
+        follow: no
+
+    - name: Create symlinks
+      file:
+        src: /opt/oracle/instantclient_18_5/{{ item }}.so.18.1
+        dest: /opt/oracle/instantclient_18_5/{{ item }}.so
+        state: link
+      with_items:
+        - libclntsh
+        - libocci
+
+    - name: Configure libraries
+      template:
+        src: etc-ld-oracle
+        dest: /etc/ld.so.conf.d/oracle-instantclient.conf
+        owner: root
+        group: root
+        mode: 0644
+
+    - name: Update libraries
+      command: ldconfig
+
+  when: not oci_file.stat.exists

tasks/oci-7.3.yml

+---
+# file: roles/php/tasks/oci-7.3.yml
+
+- debug: msg="OCI8 for PHP 7.3 not implemented yet"

tasks/oci-7.4.yml

+---
+# file: roles/php/tasks/oci-7.4.yml
+#
+# https://gist.github.com/Yukibashiri/cebaeaccbe531665a5704b1b34a3498e
+
+- name: Check OCI Requirement
+  stat:
+    path: /usr/lib/php/20190902/oci8.so
+  register: oci_file
+
+- block:
+
+    - name: Enable OCI for PHP
+      copy:
+        content: extension={{ item }}.so
+        dest: /etc/{{ php_base_dir }}/{{ php_conf_dir }}/{{ item }}.ini
+        owner: root
+        group: root
+        mode: 0644
+      with_items:
+        - oci8
+
+    - name: Remove possible components in /tmp
+      file:
+        path: /tmp/{{ item }}
+        state: absent
+      with_items:
+        - instantclient_18_5
+        - oracle_x64_18_5_0_0_0_oci8_so_php_7
+
+    - name: Make available Oracle InstantClient
+      command: scp -r {{ repository }}{{ item }} /tmp/
+      become: no
+      with_items:
+        - instantclient_18_5
+        - oracle_x64_18_5_0_0_0_oci8_so_php_7_4
+
+    - name: Remove /opt/oracle/instantclient_18_5
+      file:
+        path: /opt/oracle/instantclient_18_5
+        state: absent
+
+    - name: Ensure directory /opt/oracle
+      file:
+        path: /opt/oracle
+        state: directory
+
+    - name: Move Oracle InstantClient to /opt/oracle
+      command: mv /tmp/instantclient_18_5 /opt/oracle/instantclient_18_5
+
+    - name: Move oci8 to /usr/lib/php
+      command: mv /tmp/oracle_x64_18_5_0_0_0_oci8_so_php_7_4 /usr/lib/php/20190902/oci8.so
+
+    - name: Change ownership for Oracle InstantClient
+      file:
+        path: '{{ item }}'
+        owner: root
+        group: root
+        recurse: yes
+        follow: no
+      with_items:
+        - /opt/oracle/instantclient_18_5
+
+    - name: Ensure log directories
+      file:
+        path: /opt/oracle/instantclient_18_5/log/diag/clients
+        owner: www-data
+        group: root
+        state: directory
+        mode: 0775
+        follow: no
+
+    - name: Set permissions in log directories
+      file:
+        path: /opt/oracle/instantclient_18_5/log
+        owner: www-data
+        group: root
+        mode: 0775
+        recurse: yes
+        follow: no
+
+    - name: Create symlinks
+      file:
+        src: /opt/oracle/instantclient_18_5/{{ item }}.so.18.1
+        dest: /opt/oracle/instantclient_18_5/{{ item }}.so
+        state: link
+      with_items:
+        - libclntsh
+        - libocci
+
+    - name: Configure libraries
+      template:
+        src: etc-ld-oracle
+        dest: /etc/ld.so.conf.d/oracle-instantclient.conf
+        owner: root
+        group: root
+        mode: 0644
+
+    - name: Update libraries
+      command: ldconfig
+
+  when: not oci_file.stat.exists

tasks/oci.yml

----
-# file: roles/php/tasks/oci8.yml
-#
-# @see OCI8 Install: https://help.ubuntu.com/community/PHPOracle
-# Better:
-# @see PDO_OCI Install: https://drupal.org/comment/5572626#comment-5572626
-
-- name: "PHP | OCI | Enable OCI for PHP"
-  copy:
-    content='extension={{ item }}.so'
-    dest=/etc/php5/{{ php_conf_dir }}/{{ item }}.ini
-    owner=root
-    group=root
-    mode=0644
-  with_items:
-    - oci8
-    - pdo_oci
-
-- name: "PHP | OCI | Remove possible components in /tmp"
-  command: rm -Rf /tmp/{{ item }}
-  with_items:
-    - instantclient_11_2
-    - oracle_x64_11_2_0_3_0_oci8_so
-    - oracle_x64_11_2_0_3_0_pdo_oci_so
-
-- name: "PHP | OCI | Make available Oracle InstantClient"
-  command: scp -r {{ repository }}{{ item }} /tmp/
-  become: no
-  with_items:
-    - instantclient_11_2
-    - oracle_x64_11_2_0_3_0_oci8_so
-    - oracle_x64_11_2_0_3_0_pdo_oci_so
-
-- name: "PHP | OCI | Remove /usr/local/lib/instantclient_11_2"
-  command: rm -Rf /usr/local/lib/instantclient_11_2
-
-- name: "PHP | OCI | Move Oracle InstantClient to /usr/local/lib"
-  command: mv /tmp/instantclient_11_2 /usr/local/lib/
-
-- name: "PHP | OCI | Move oci8 to /usr/lib/php5"
-  command: mv /tmp/oracle_x64_11_2_0_3_0_oci8_so /usr/lib/php5/20090626/oci8.so
-
-- name: "PHP | OCI | Move pdo_oci to /usr/lib/php5"
-  command: mv /tmp/oracle_x64_11_2_0_3_0_pdo_oci_so /usr/lib/php5/20090626/pdo_oci.so
-
-- name: "PHP | OCI | Change ownership for Oracle InstantClient"
-  file:
-    path="{{ item }}"
-    owner="root"
-    group="root"
-    recurse=yes
-  with_items:
-    - /usr/local/lib/instantclient_11_2
-    - /usr/lib/php5/20090626/oci8.so
-    - /usr/lib/php5/20090626/pdo_oci.so
-
-- name: "PHP | OCI | Make available libclntsh.so"
-  file:
-    src=/usr/local/lib/instantclient_11_2/libclntsh.so.11.1
-    dest=/usr/local/lib/instantclient_11_2/libclntsh.so
-    state=link

tasks/php.yml

 ---
 # file: roles/php/tasks/php.yml
 
-- name: "PHP | Install required packages."
+- name: Apt Repository
+  apt_repository:
+    repo: '{{ item }}'
+    state: present
+    mode: 0644
+  with_items: '{{ php_repositories }}'
+
+- name: Install required packages.
   apt:
-    pkg={{ item }}
-    state=installed
-  with_items:
-    - php5
-    - php-apc
-    - php-soap
-    - php5-cgi
-    - php5-mysql
-    - php5-xmlrpc
-    - php5-gd
-    - php5-imagick
-    - php5-mcrypt
-    - php5-imap
-    - php5-curl
-    - php5-xdebug
-    - php5-dev
-    - php-pear
-    - imagemagick
+    pkg: '{{ php_packages }}'
+    state: present
+    force: yes
   notify:
-    - "PHP | Restart Apache"
+    - Restart Apache
 
-- name: "PHP | Enable Apache modules"
-  apache2_module:
-    name={{ item }}
-    state=present
-  with_items:
-    - fcgid
-  when: not php_called_from_apache
-  notify: "PHP | Restart Apache"
+- name: Hold em all
+  shell: dpkg --get-selections | grep ^sed s/install/hold/g | sudo dpkg --set-selections
+  when: php_hold_version
+
+- name: Install PECL packages
+  shell: pecl install --soft imagick-3.3.0
+  when: php_version_main|default(7) != 7
+  ignore_errors: yes
+
+# NOTE: If oauth is already installed and we install a new PHP 7 version then this fails and we need --force as well
+- name: Install PECL packages
+  shell: pecl install --soft --force oauth
+  when: php_version_main|default(7) == 7
+  ignore_errors: yes
 
-- name: "PHP | Configuration file, php.ini"
+- name: Ensure Apache config directory
+  file:
+    dest: /etc/{{ php_base_dir }}/apache2
+    state: directory
+    owner: root
+    group: root
+    mode: 0755
+
+- name: Configuration file, php.ini
   template:
-    src=etc-php5-apache2-php.ini
-    dest=/etc/php5/apache2/php.ini
-    owner=root
-    group=root
-    mode=0644
-  when: not php_called_from_apache
+    src: etc-php5-apache2-php.ini
+    dest: /etc/{{ php_base_dir }}/apache2/php.ini
+    owner: root
+    group: root
+    mode: 0644
   notify:
-    - "PHP | Restart Apache"
+    - Restart Apache
 
-- include: php53.yml
+- name: Import php53
+  import_tasks: php53.yml
   when: php_version|default('5.5') == '5.3'
 
-- name: "PHP | Configuration file, fcgid.conf"
+- name: Configuration file, fcgid.conf
   template:
-    src=fcgid.conf
-    dest=/etc/apache2/mods-available/fcgid.conf
-    owner=root
-    group=root
-    mode=0644
-  when: not php_called_from_apache
+    src: fcgid.conf
+    dest: /etc/apache2/mods-available/fcgid.conf
+    owner: root
+    group: root
+    mode: 0644
   notify:
-    - "PHP | Restart Apache"
-
-# TODO: Upgrade APCu on Ubuntu 14.04
-# @see https://github.com/owncloud/core/issues/14175#issuecomment-74573088
-# wget https://launchpad.net/~ondrej/+archive/ubuntu/php5/+build/6149263/+files/php5-apcu_4.0.6-1%2Bdeb.sury.org~utopic%2B1_amd64.deb
-# sudo dpkg -i php5-apcu_4.0.6-1+deb.sury.org~utopic+1_amd64.deb
+    - Restart Apache
 
-- name: "PHP | Cache configuration file, apc.ini"
+- name: Configuration files
   template:
-    src=etc-php5-conf-d-apc.ini
-    dest=/etc/php5/{{ php_conf_dir }}/apc.ini
-    owner=root
-    group=root
-    mode=0644
+    src: etc-php5-conf-d-{{ item }}.ini
+    dest: /etc/{{ php_base_dir }}/{{ php_conf_dir }}/{{ item }}.ini
+    owner: root
+    group: root
+    mode: 0644
+  with_items:
+    - apcu
+    - opcache
   notify:
-    - "PHP | Restart Apache"
+    - Restart Apache
 
-- name: "PHP | Create extra directory for browscap"
+- name: Create extra directory for browscap
   file:
-    dest=/etc/php5/apache2/extra
-    state=directory
-    owner=root
-    group=root
+    dest: /etc/{{ php_base_dir }}/apache2/extra
+    state: directory
+    owner: root
+    group: root
   when: php_browscap
 
-- name: "PHP | browscap.ini"
+- name: browscap.ini
   copy:
-    src=browscap.ini
-    dest=/etc/php5/apache2/extra/browscap.ini
-    owner=root
-    group=root
-  when: not php_called_from_apache and php_browscap
-  notify:
-    - "PHP | Restart Apache"
-
-- name: "PHP | Enable PHP modules"
-  shell: php5enmod {{ item }}
-  with_items:
-    - mcrypt
-    - imap
-    - imagick
-  when: php_conf_dir == 'mods-available'
+    src: browscap.ini
+    dest: /etc/{{ php_base_dir }}/apache2/extra/browscap.ini
+    owner: root
+    group: root
+  when: php_browscap
   notify:
-    - "PHP | Restart Apache"
+    - Restart Apache
 
-- name: "PHP | Create htdocs directory for apc status"
+- name: Create htdocs directory for apc status
   file:
-    dest=/var/www/apc
-    state=directory
-    owner=www-data
-    group=www-data
+    dest: /var/www/apc
+    state: directory
+    owner: www-data
+    group: www-data
 
-- name: "PHP | Copy APC status php script"
+- name: Copy APC status php script
   copy:
-    src=apc.php
-    dest=/var/www/apc
-    owner=www-data
-    group=www-data
-
-- name: "PHP | Check OCI Requirement"
-  shell: ls /usr/lib/php5/20090626/pdo_oci.so
-  register: oci_available
-  when: php_needs_oci8
-  ignore_errors: yes
-  changed_when: oci_available.stdout != '/usr/lib/php5/20090626/pdo_oci.so'
+    src: apc.php
+    dest: /var/www/apc
+    owner: www-data
+    group: www-data
+
+- name: Include oci version
+  include_tasks: oci-{{ php_version|default('5.5') }}.yml
+  when: repository is defined and php_needs_oci8
+
+- name: Include mcrypt
+  include_tasks: mcrypt-7.2.yml
+  when: php_version|default('5.5') == '7.2' and php_needs_mcrypt
+
+- name: Import msodbc
+  import_tasks: msodbc.yml
+  when: php_needs_msodbc
+
+- block:
+
+    - name: Apache FPM Socket Configuration
+      template:
+        src: etc-apache2-conf-available-php-fpm
+        dest: /etc/apache2/{{ apache_conf_dir }}/php{{ php_version_main }}-fpm.conf
+        owner: root
+        group: root
+        mode: 0644
+      notify:
+        - Restart Apache
+
+    - name: Enable Apache PHP FPM Configuration
+      command: a2enconf php{{ php_version_main }}-fpm
+      args:
+        creates: /etc/apache2/conf-enabled/php{{ php_version_main }}-fpm{{ apache_conf_ext }}
+      notify:
+        - Restart Apache
+
+  when: php_fpm_socket
+
+- name: FPM Default Pool Configuration
+  template:
+    src: php_pool.conf
+    dest: /etc/{{ php_base_dir }}/fpm/pool.d/default.conf
+    owner: root
+    group: root
+    mode: 0644
+  when: (php_version_main|default(7) == 7) and php_fpm and apache_server_default
   notify:
-    - "PHP | Restart Apache"
+    - Restart PHP-FPM
+
+- block:
+    - name: Set facts for PHP 7
+      set_fact:
+        phpLogRotatePrefix: '{{php_version|default("7.0")}}'
+        phpLibPrefix: ''
+      when: php_version_main|default(7) == 7
+    - name: Set facts for PHP 5
+      set_fact:
+        phpLogRotatePrefix: '5'
+        phpLibPrefix: '5'
+      when: php_version_main|default(7) != 7
+
+    - name: Install logrotate script
+      template:
+        src: etc-logrotate-php
+        dest: /etc/logrotate.d/php{{ phpLogRotatePrefix }}-fpm
+        owner: root
+        group: root
+        mode: 0644
+      notify:
+        - Initial Logrotate
+
+    - name: Adjust apache config for default site
+      lineinfile:
+        dest: /etc/apache2/sites-available/{{ apache_conf_default_prefix }}default{{ apache_conf_ext }}
+        regexp: '{{ item.regexp }}'
+        line: '{{ item.line }}'
+        backrefs: yes
+      with_items:
+        - regexp: 'ProxyPassMatch'
+          line: '  ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:{{ php_fpm_port|default(9999) }}/var/www{{apache_server_default_root}}/$1'
+        - regexp: '<Proxy fcgi'
+          line: '  <Proxy fcgi://127.0.0.1:{{ php_fpm_port|default(9999) }}>'
+      when: apache_server_default
+      notify:
+        - Restart PHP-FPM
+        - Restart Apache
+
+  when: php_fpm
+  tags:
+    - logrotate
 
-- include: oci.yml
-  when: repository is defined and php_needs_oci8 and oci_available.stdout != '/usr/lib/php5/20090626/pdo_oci.so'
+- name: Explicitly set PHP version for CLI
+  alternatives:
+    name: php
+    path: /usr/bin/php{{ php_version }}

tasks/php53.yml

+# see https://www.howtoforge.com/how-to-use-multiple-php-versions-php-fpm-and-fastcgi-with-ispconfig-3-ubuntu-12.10
+
 ---
 # file: roles/php/tasks/php53.yml
 
-- name: "Ensure PHP53 config directory"
+- name: Ensure PHP53 config directory
+  file:
+    dest: '{{ item }}'
+    state: directory
+  with_items:
+    - /etc/{{ php_base_dir }}/fpm/pool.d/
+
+- name: Check PHP 5.3 Requirement
+  shell: php --version
+  register: php_version_available
+  changed_when: no
+
+- block:
+    - name: Package Preferences
+      template:
+        src: preferences/{{ item }}
+        dest: /etc/apt/preferences.d/{{ item }}-pin
+        owner: root
+        group: root
+        mode: 0644
+      with_items:
+        - openssl
+        - libssl
+
+    - name: Install Packages
+      apt:
+        pkg: '{{ packages }}'
+        state: present
+      vars:
+        packages:
+          - autoconf2.13
+          - automake1.4
+          - build-essential
+          - libc-client2007e
+          - libc-client2007e-dev
+          - libfcgi-dev
+          - libfcgi0ldbl
+          - libfreetype6-dev
+          - libgif-dev
+          - libgif4
+          - libjpeg-progs
+          - libjpeg62-dbg
+          - libjpeg8
+          - libjpeg8-dev
+          - libmcrypt-dev
+          - libmysqlclient-dev
+          - libpcre++-dev
+          - libpcre3-dev
+          - libpng-dev
+          - libssl-dev
+          - libx11-dev
+          - libxau-dev
+          - libxcb1-dev
+          - libxdmcp-dev
+          - libxml2-dev
+          - libxml2-dev
+          - libxpm-dev
+          - x11proto-core-dev
+          - x11proto-input-dev
+          - x11proto-kb-dev
+          - xtrans-dev
+
+    - name: Link Client Lib
+      file:
+        src: /usr/lib/libc-client.a
+        dest: /usr/lib/x86_64-linux-gnu/libc-client.a
+        state: link
+
+    - name: Make sure an empty directory /tmp/php53 exists
+      file:
+        path: /tmp/php53
+        state: '{{ item }}'
+      with_items:
+        - absent
+        - directory
+
+    - name: Download PHP 5.3
+      get_url:
+        url: 'http://in1.php.net/distributions/php-5.3.29.tar.bz2'
+        dest: /tmp/php-5.3.29.tar.bz2
+
+    - name: Unpack PHP 5.3
+      unarchive:
+        src: /tmp/php-5.3.29.tar.bz2
+        dest: /tmp/php53
+        copy: no
+
+    - name: Compile PHP 5.3
+      shell: '{{ item }}'
+      args:
+        chdir: /tmp/php53/php-5.3.29
+      with_items:
+        - ./configure --with-libdir=/lib/x86_64-linux-gnu --enable-fpm --enable-mbstring --enable-sockets --with-zlib --enable-zip --with-imap-ssl --with-imap --with-curl --with-mcrypt --with-gd --with-mysql --with-pdo-mysql --with-mysqli --with-gettext --with-jpeg-dir=/usr --with-png-dir=/usr --with-kerberos --with-openssl --disable-cgi
+        - make
+        - make install
+
+    - name: Create PHP53 Start Script
+      template:
+        src: etc-init-d-php53-fpm
+        dest: /etc/init.d/php-fpm
+        owner: root
+        group: root
+        mode: 0755
+
+    - name: Add PHP-FPM to Boot-List
+      command: update-rc.d php-fpm defaults
+
+  when: php_version_available and 'PHP 5.3.29' not in php_version_available.stdout
+
+- name: Copy PHP53 Libraries
+  copy:
+    src: php53/libs/{{ item.file }}
+    dest: '{{ php53.libdir }}/{{ item.file }}'
+    owner: root
+    group: root
+    mode: 0644
+  with_items: '{{ php53.libraries }}'
+
+- name: Ensure PHP53 Library Links
+  file:
+    src: '{{ php53.libdir }}/{{ item.file }}'
+    dest: '{{ php53.libdir }}/{{ item.link }}'
+    state: link
+    owner: root
+    group: root
+    mode: 0644
+  with_items: '{{ php53.libraries }}'
+
+- name: Ensure extra Library Links
   file:
-    dest='{{ item }}'
-    state='directory'
+    src: '{{ item.src }}'
+    dest: '{{ php53.libdir }}/{{ item.link }}'
+    state: link
+    owner: root
+    group: root
+    mode: 0644
+  with_items: '{{ php53.liblinks }}'
+
+- name: Copy PHP53 Modules
+  copy:
+    src: php53/{{ item }}.so
+    dest: '{{ php53.extdir }}/{{ item }}.so'
+    owner: root
+    group: root
+    mode: 0644
+  with_items: '{{ php53.modules }}'
+
+- name: Create PHP53 INI Files
+  template:
+    src: etc-php5-apache2-php.ini
+    dest: /etc/{{ php_base_dir }}/{{ item }}/php.ini
+    owner: root
+    group: root
+    mode: 0644
   with_items:
-    - '/etc/php5/cli53/conf.d/'
-    - '/etc/php5/cgi53/conf.d/'
-
-# http://askubuntu.com/questions/462673/installing-php-5-3-in-ubuntu-14-04
-# apt-get purge php5 && sudo apt-get install libxml2-dev
-# wget http://in1.php.net/distributions/php-5.3.29.tar.bz2
-# tar -xvf php-5.3.29.tar.bz2
-# cd php-5.3.29
-# ./configure
-# make
-# make install
+    - cgi53
+    - cli53
+    - fpm

tasks/variables.yml

+---
+# file: roles/php/tasks/variables.yml
+
+- block:
+  - name: Set default facts
+    set_fact:
+      phpFpmService: php5-fpm
+  - name: Set facts for PHP 5
+    set_fact:
+      phpFpmService: php-fpm
+    when: php_version_main|default(7) == 5
+  - name: Set facts for PHP 7
+    set_fact:
+      phpFpmService: php{{php_version|default("7.0")}}-fpm
+    when: php_version_main|default(7) == 7
+  tags:
+    - always

templates/etc-apache2-conf-available-php-fpm

+<IfModule mod_fastcgi.c>
+  AddHandler php{{ php_version_main }}-fcgi .php
+  Action php{{ php_version_main }}-fcgi /php{{ php_version_main }}-fcgi
+  Alias /php{{ php_version_main }}-fcgi /usr/lib/cgi-bin/php{{ php_version_main }}-fcgi
+  FastCgiExternalServer /usr/lib/cgi-bin/php{{ php_version_main }}-fcgi -socket /var/run/php{{ php_version_main }}-fpm.sock -pass-header Authorization
+
+  <Directory /usr/lib/cgi-bin>
+    Include /etc/apache2/{{ apache_conf_dir }}/global-deny.conf
+  </Directory>
+</IfModule>

templates/etc-init-d-php53-fpm

+#!/bin/sh
+
+### BEGIN INIT INFO
+# Provides:          php-fpm
+# Required-Start:    $remote_fs $network
+# Required-Stop:     $remote_fs $network
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: starts php-fpm
+# Description:       starts the PHP FastCGI Process Manager daemon
+### END INIT INFO
+
+prefix=/usr/local
+exec_prefix=${prefix}
+
+php_fpm_BIN=${exec_prefix}/sbin/php-fpm
+php_fpm_CONF=/etc/{{ php_base_dir }}/fpm/php-fpm.conf
+php_fpm_INI=/etc/{{ php_base_dir }}/fpm/php.ini
+php_fpm_PID=/var/run/php5-fpm.pid
+
+php_opts="-c $php_fpm_INI --fpm-config $php_fpm_CONF --pid $php_fpm_PID"
+
+wait_for_pid () {
+	try=0
+
+	while test $try -lt 35 ; do
+
+		case "$1" in
+			'created')
+			if [ -f "$2" ] ; then
+				try=''
+				break
+			fi
+			;;
+
+			'removed')
+			if [ ! -f "$2" ] ; then
+				try=''
+				break
+			fi
+			;;
+		esac
+
+		echo -n .
+		try=`expr $try + 1`
+		sleep 1
+
+	done
+
+}
+
+case "$1" in
+	start)
+		echo -n "Starting php-fpm "
+
+		$php_fpm_BIN --daemonize $php_opts
+
+		if [ "$?" != 0 ] ; then
+			echo " failed"
+			exit 1
+		fi
+
+		wait_for_pid created $php_fpm_PID
+
+		if [ -n "$try" ] ; then
+			echo " failed"
+			exit 1
+		else
+			echo " done"
+		fi
+	;;
+
+	stop)
+		echo -n "Gracefully shutting down php-fpm "
+
+		if [ ! -r $php_fpm_PID ] ; then
+			echo "warning, no pid file found - php-fpm is not running ?"
+			exit 1
+		fi
+
+		kill -QUIT `cat $php_fpm_PID`
+
+		wait_for_pid removed $php_fpm_PID
+
+		if [ -n "$try" ] ; then
+			echo " failed. Use force-quit"
+			exit 1
+		else
+			echo " done"
+		fi
+	;;
+
+	force-quit)
+		echo -n "Terminating php-fpm "
+
+		if [ ! -r $php_fpm_PID ] ; then
+			echo "warning, no pid file found - php-fpm is not running ?"
+			exit 1
+		fi
+
+		kill -TERM `cat $php_fpm_PID`
+
+		wait_for_pid removed $php_fpm_PID
+
+		if [ -n "$try" ] ; then
+			echo " failed"
+			exit 1
+		else
+			echo " done"
+		fi
+	;;
+
+	restart)
+		$0 stop
+		$0 start
+	;;
+
+	reload)
+
+		echo -n "Reload service php-fpm "
+
+		if [ ! -r $php_fpm_PID ] ; then
+			echo "warning, no pid file found - php-fpm is not running ?"
+			exit 1
+		fi
+
+		kill -USR2 `cat $php_fpm_PID`
+
+		echo " done"
+	;;
+
+	*)
+		echo "Usage: $0 {start|stop|force-quit|restart|reload}"
+		exit 1
+	;;
+
+esac

templates/etc-ld-oracle

+/opt/oracle/instantclient_18_5

templates/etc-logrotate-php

+/var/log/php{{ phpLogRotatePrefix }}-fpm.log {
+  daily
+  rotate 7
+  missingok
+  notifempty
+  create 644 root root
+  compress
+  delaycompress
+  postrotate
+    /usr/lib{{ phpLibPrefix }}/php/php{{ phpLogRotatePrefix }}-fpm-reopenlogs
+  endscript
+}

templates/etc-php5-conf-d-apc.ini

-extension = apc.so
-apc.rfc1867 = {{ apc_rfc1867 }}
-apc.shm_size = {{ apc_shm_size }}
-apc.shm_segments = {{ apc_shm_segments }}
-apc.num_files_hint = {{ apc_num_files_hint }}

templates/etc-php5-conf-d-apcu.ini

+extension=apcu.so
+apc.shm_size={{ apc_shm_size }}

templates/etc-php5-conf-d-opcache.ini

+; priority=10
+zend_extension=opcache.so
+opcache.enable=1
+opcache.enable_cli=1
+opcache.save_comments=1
+opcache.memory_consumption={{ opcache_memory_consumption }}
+opcache.max_accelerated_files={{ opcache_max_accelerated_files }}
+opcache.revalidate_freq={{ opcache_revalidate_freq }}
+opcache.interned_strings_buffer={{ opcache_interned_strings_buffer }}

templates/php_pool.conf

+[default]
+user = www-data
+group = www-data
+;chroot = /var/www{{apache_server_default_root|default('')}}
+chdir = /
+{% if php_fpm_socket %}
+listen = /var/run/php{{ php_version_main }}-fpm.sock
+{% else %}
+listen = 127.0.0.1:{{ php_fpm_port|default(9999) }}
+{% endif %}
+
+; Process manager
+pm = dynamic
+pm.max_children = 10
+pm.start_servers = 4
+pm.min_spare_servers = 2
+pm.max_spare_servers = 6
+pm.max_requests = 2000
+pm.status_path = /fpm-status
+
+; Environment variables
+env[HOSTNAME] = {{ inventory_hostname }}
+env[PATH] = /usr/local/bin:/usr/sbin:/usr/bin:/bin
+env[TMP] = /tmp
+env[TMPDIR] = /tmp
+env[TEMP] = /tmp
+
+; PHP settings
+php_admin_value[doc_root] = /var/www{{apache_server_default_root|default('')}}
+php_admin_value[upload_tmp_dir] = /tmp
+php_admin_value[browscap] = {{ php_browscap }}
+php_admin_value[conf_dir] = {{ php_conf_dir }}
+php_admin_value[date_timezone] = {{ php_date_timezone }}
+php_admin_value[display_errors] = {{ php_display_errors }}
+php_admin_value[display_startup_errors] = {{ php_display_startup_errors }}
+php_admin_value[error_reporting] = {{ php_error_reporting }}
+php_admin_value[expose_php] = {{ php_expose_php }}
+php_admin_value[filter.default] = {{ php_filter_default }}
+php_admin_value[html_errors] = {{ php_html_errors }}
+php_admin_value[log_errors] = {{ php_log_errors }}
+php_admin_value[magic_quotes_gpc] = {{ php_magic_quotes_gpc }}
+php_admin_value[max_execution_time] = {{ php_max_execution_time }}
+php_admin_value[max_input_time] = {{ php_max_input_time }}
+php_admin_value[max_input_vars] = {{ php_max_input_vars }}
+php_admin_value[needs_oci8] = {{ php_needs_oci8 }}
+php_admin_value[register_globals] = {{ php_register_globals }}
+php_admin_value[register_long_arrays] = {{ php_register_long_arrays }}
+php_admin_value[sendmail_path] = {{ php_sendmail_path }}
+php_admin_value[session_cache_expire] = {{ php_session_cache_expire }}
+php_admin_value[session_cookie_lifetime] = {{ php_session_cookie_lifetime }}
+php_admin_value[session_gc_divisor] = {{ php_session_gc_divisor }}
+php_admin_value[session_gc_maxlifetime] = {{ php_session_gc_maxlifetime }}
+php_admin_value[short_open_tag] = {{ php_short_open_tag }}
+
+php_admin_value[max_file_uploads] = {{ php_max_file_uploads }}
+php_admin_value[memory_limit] = {{ php_memory_limit }}
+php_admin_value[post_max_size] = {{ php_post_max_size }}
+php_admin_value[upload_max_filesize] = {{ php_upload_max_filesize }}

templates/preferences/libssl

+Package: libssl-dev
+Pin: release o=LP-PPA-ondrej-apache2
+Pin-Priority: -1

templates/preferences/openssl

+Package: openssl
+Pin: release o=LP-PPA-ondrej-apache2
+Pin-Priority: -1