django-orchestra/scripts/services/apache_full_stack.md

Apache 2 MPM Event with PHP-FPM, FCGID and SUEXEC on Debian Jessie

The goal of this setup is having a high-performance state-of-the-art deployment of Apache and PHP while being compatible with legacy applications.

• Apache Event MPM engine handles requests asynchronously, instead of using a dedicated thread or process per request.

• PHP-FPM is a FastCGI process manager included in modern versions of PHP. Compared to FCGID it provides better process management features and enables the OPCache to be shared between workers.

• FCGID and SuEXEC are used for legacy apps that need older versions of PHP (i.e. PHP 5.2 or PHP 4)

Sources:

• Source http://wiki.apache.org/httpd/PHP-FPM

Related:

• PHP4 on debian
• VsFTPd
• Webalizer

1. Install the machinery

   apt-get update
   apt-get install apache2-mpm-event php5-fpm libapache2-mod-fcgid apache2-suexec-custom php5-cgi
   

TODO libapache2-mod-auth-pam is no longer part of the debian distribution,

replace with libapache2-mod-authnz-external pwauth

2. Enable some convinient Apache modules

   a2enmod suexec
   a2enmod ssl
   #a2enmod auth_pam
   a2enmod proxy_fcgi
   a2emmod userdir
   

   • TODO compat module https://httpd.apache.org/docs/trunk/mod/mod_access_compat.html

3. Configure suexec-custom

   sed -i "s#/var/www#/home#" /etc/apache2/suexec/www-data
   sed -i "s#public_html#webapps#" /etc/apache2/suexec/www-data
   

4. Create logs directory for virtualhosts

   mkdir -p /var/log/apache2/virtual/
   chown -R www-data:www-data /var/log/apache2
   

5. Restart Apache

   service apache2 restart
   

• ExecCGI

  <Directory /home/*/webapps/>
      Options +ExecCGI
  </Directory>
  

• Permissions <Directory /home/*/webapps> Require all granted

TODO pool per website or pool per user? memory consumption

events.mechanism = epoll

TODO multiple master processes, opcache is held in master, and reload/restart affects all pools

http://mattiasgeniar.be/2014/04/09/a-better-way-to-run-php-fpm/

TODO CHRoot https://andrewbevitt.com/tutorials/apache-varnish-chrooted-php-fpm-wordpress-virtual-host/

```bash
echo '
[vhost]
istemplate = 1
listen.mode = 0660
pm = ondemand
pm.max_children = 5
pm.process_idle_timeout = 10s
pm.max_requests = 200
' > /etc/php5/fpm/conf.d/vhost-template.conf
```

```bash
mkdir -p /var/run/fpm/socks/
chmod 771 /var/run/fpm/socks
chown orchestra.orchestra /var/run/fpm/socks
```