php: Enable ACL support for FPM

This will allow authorizing extra processes like Prometheus exporter without having to run it as `listen.user` (or adding it `listen.group` and changing `listen.mode` to `0660`).

It is disabled by default:

https://www.php.net/manual/en/install.fpm.install.php

but it has been available since PHP 5.6:

744ada7d9d

And Debian enables it too:

153055e5e3
This commit is contained in:
Jan Tojnar
2025-11-10 03:57:40 +01:00
parent b6a8526db0
commit 3e601e5455

View File

@@ -13,6 +13,7 @@ let
makeBinaryWrapper,
symlinkJoin,
writeText,
acl,
autoconf,
automake,
bison,
@@ -248,6 +249,7 @@ let
# Enable sapis
++ lib.optionals pearSupport [ libxml2.dev ]
++ lib.optionals (fpmSupport && stdenv.hostPlatform.isLinux) [ acl ]
# Misc deps
++ lib.optional apxs2Support apacheHttpd
@@ -268,7 +270,10 @@ let
# Enable sapis
++ lib.optional (!cgiSupport) "--disable-cgi"
++ lib.optional (!cliSupport) "--disable-cli"
++ lib.optional fpmSupport "--enable-fpm"
++ lib.optionals fpmSupport [
"--enable-fpm"
(lib.withFeature stdenv.hostPlatform.isLinux "fpm-acl")
]
++ lib.optionals pearSupport [
"--with-pear"
"--enable-xml"