diff --git a/manifests/fpm/pool.pp b/manifests/fpm/pool.pp index 67ac5751..8ca3fa6b 100644 --- a/manifests/fpm/pool.pp +++ b/manifests/fpm/pool.pp @@ -24,6 +24,14 @@ # # [*listen_mode*] # +# [*listen_acl_users*] +# When POSIX Access Control Lists are supported you can set them using this option. +# When set, listen.owner and listen.group are ignored. Value is a comma separated +# list of user names. +# +# [*listen_acl_groups*] +# See listen_acl_users. Value is a comma separated list of group names. +# # [*user*] # The user that php-fpm should run as # @@ -128,6 +136,8 @@ $listen_owner = undef, $listen_group = undef, $listen_mode = undef, + Optional[String[1]] $listen_acl_users = undef, + Optional[String[1]] $listen_acl_groups = undef, $user = $php::fpm::config::user, $group = $php::fpm::config::group, Optional[String[1]] $apparmor_hat = undef, diff --git a/templates/fpm/pool.conf.erb b/templates/fpm/pool.conf.erb index 99981d19..8c25dfd7 100644 --- a/templates/fpm/pool.conf.erb +++ b/templates/fpm/pool.conf.erb @@ -38,6 +38,12 @@ listen.mode = <%= @listen_mode %> <% else -%> ;listen.mode = 0660 <% end -%> +<% if @listen_acl_users -%> +listen.acl_users = <%= @listen_acl_users %> +<% end -%> +<% if @listen_acl_groups -%> +listen.acl_groups = <%= @listen_acl_groups %> +<% end -%> ; Unix user/group of processes ; Note: The user is mandatory. If the group is not set, the default user's group