3 Commits

Author	SHA1	Message	Date
jknapp	e5e055d198	Fix ProxyFCGISetEnvIf syntax for SCRIPT_FILENAME rewrite ... The previous expr= with s|...|...| substitution syntax doesn't exist in Apache expressions — it silently failed, leaving SCRIPT_FILENAME pointing to /mnt/users/ which PHP-FPM can't find. Fixed to use regex match in the conditional with backreferences: reqenv('SCRIPT_FILENAME') =~ m#^/mnt/users/([^/]+)/([^/]+)/public_html(.*)# -> /home/$1/public_html$3 This is also generic (captures user from the path) so the template no longer needs per-user placeholder substitution for this directive. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-01 12:32:52 -07:00
jknapp	c68b555a5f	Fix PHP-FPM path mismatch in shared httpd vhost template ... The shared httpd serves files from /mnt/users/{user}/{domain}/public_html but PHP-FPM containers have them at /home/{user}/public_html. When Apache proxied PHP requests via fcgi, SCRIPT_FILENAME pointed to the Apache path which doesn't exist inside the FPM container, causing "File not found". Added ProxyFCGISetEnvIf to rewrite SCRIPT_FILENAME from the shared httpd path to the FPM container path before proxying the request. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-01 12:22:53 -07:00
jknapp	c78167871c	Add shared httpd + PHP-FPM-only container architecture ... Separate Apache and PHP-FPM into distinct container roles to reduce per-customer memory overhead on shared servers. Adds three new images: - Dockerfile.fpm: PHP-FPM only (no Apache), listens on TCP port 9000 - Dockerfile.shared-httpd: Apache only (no PHP), with SSL and proxy_fcgi - Existing Dockerfile unchanged for standalone mode Key changes: - detect-memory.sh: CONTAINER_ROLE env var (combined/fpm_only/httpd_only) controls the memory budget split - create-php-config.sh: FPM_LISTEN env var for TCP port vs Unix socket, added /fpm-ping and /fpm-status health endpoints - New entrypoints for each container role - tune-mpm.sh for hot-adjusting Apache MPM settings - shared-vhost-template.tpl with proxy_fcgi and SSL on port 443 - CI/CD builds all three image types in parallel Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-01 10:08:00 -07:00