---

### PHP config ###
php_install_composer: true
php_enable_php_fpm: true
php_webserver_daemon: "nginx"

# Ensure the socket directory and permissions allow Nginx access
php_fpm_pool_user: "nginx"
php_fpm_pool_group: "nginx"
php_fpm_listen_owner: "nginx"
php_fpm_listen_group: "nginx"

# Default Unix socket location on RHEL
php_fpm_listen: "/run/php-fpm/www.sock"

php_packages:
  - php-cli
  - php-common
  - php-fpm
  - php-gd
  - php-ldap
  - php-mbstring
  - php-mysqlnd
  - php-pdo
  - php-pgsql
  - php-xml
  - php-pecl-zip

### Nginx config ###
nginx_vhosts:
  # ----------------------------------------
  # metaunix.net (Default Server)
  # ----------------------------------------
  - listen: "80 default_server"
    server_name: "{{ ansible_fqdn }} metaunix.net www.metaunix.net www.int.metaunix.net"
    root: "/nfs/web/www"
    index: "index.html"
    extra_parameters: |
      location / {
          try_files $uri $uri/ =404;
      }

      location ~ .well-known/acme-challenge/ {
          root /nfs/web/acme;
          try_files $uri =404;
      }

  # ----------------------------------------
  # wiki.bitgoblin.tech (DokuWiki)
  # ----------------------------------------
  - listen: "80"
    server_name: "wiki.bitgoblin.tech"
    root: "/nfs/web/dokuwiki"
    index: "index.php"
    extra_parameters: |
      location / {
          index doku.php;
          try_files $uri $uri/ @dokuwiki;
      }

      location @dokuwiki {
          rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
          rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
          rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
          rewrite ^/(.*) /doku.php?id=$1 last;
      }

      location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
          expires 30d;
      }

      location ^~ /conf/ {
          return 403;
      }

      location ^~ /data/ {
          return 403;
      }

      location ~ \.php$ {
          fastcgi_split_path_info ^(.+\.php)(/.+)$;
          fastcgi_pass unix:{{ php_fpm_listen }};
          fastcgi_index index.php;
          include fastcgi_params;
          fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
          fastcgi_param HTTPS on;
          fastcgi_param SERVER_PORT 443;
          fastcgi_param HTTP_X_FORWARDED_PROTO $http_x_forwarded_proto;
          fastcgi_param HTTP_X_FORWARDED_SSL on;
          fastcgi_param REDIRECT_STATUS 200;
      }

      location ~ .well-known/acme-challenge/ {
          root /nfs/web/acme;
          try_files $uri =404;
      }

  # ----------------------------------------
  # yourls.bitgoblin.tech
  # ----------------------------------------
  - listen: "80"
    server_name: "yourls.bitgoblin.tech u.bitgoblin.tech"
    root: "/nfs/web/yourls"
    index: "index.php"
    extra_parameters: |
      location / {
          try_files $uri $uri/ /yourls-loader.php$is_args$args;
      }

      location ~ \.php$ {
          fastcgi_split_path_info ^(.+\.php)(/.+)$;
          fastcgi_pass unix:{{ php_fpm_listen }};
          fastcgi_index index.php;
          include fastcgi.conf;
          fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
          fastcgi_param REDIRECT_STATUS 200;
      }

      location ~ .well-known/acme-challenge/ {
          root /nfs/web/acme;
          try_files $uri =404;
      }