nextcloud: Bereite PHP-PFM-Härtung von

tasks/php.yml

@@ -11,6 +11,23 @@
     - stop php-fpm-service
     - start php-fpm-socket
 
+#- name: "php | Erstelle PHPPFM-override-Verzeichnis"
+#  ansible.builtin.file:
+#    path: "/etc/systemd/system/php-fpm@{{ instance.user }}.service.d"
+#    state: directory
+#    mode: 0755
+
+#- name: "php | Kopiere PHPFPM-override-Datei"
+#  ansible.builtin.template:
+#    src: systemd/php-fpm-override.conf
+#    dest: "/etc/systemd/system/php-fpm@{{ instance.user }}.service.d/override.conf"
+#    mode: 0644
+#  notify:
+#    - stop php-fpm-socket
+#    - stop php-fpm-service
+#    - Systemd daemon-reload
+#    - start php-fpm-socket
+
 - name: "php | {{ instance.name }} | Erstelle Log-Datei"
   file:
     path: "{{ php_fpm_log_dir }}/{{ instance.user }}.log"

templates/systemd/php-fpm-override.conf

@@ -0,0 +1,4 @@
+# {{ ansible_managed }}
+
+[Service]
+ReadWritePaths=-{{ nextcloud_install_path }}/