; BastionGuard WebUI - optional dedicated PHP-FPM pool
; Copy to your PHP-FPM pool directory and adjust user/group/socket path.
; Arch: /etc/php/php-fpm.d/bastionguard-webui.conf
; Debian/Ubuntu: /etc/php/<version>/fpm/pool.d/bastionguard-webui.conf
; Fedora/RHEL: /etc/php-fpm.d/bastionguard-webui.conf

[bastionguard-webui]
user = http
group = http
listen = /run/php-fpm/bastionguard-webui.sock
listen.owner = http
listen.group = http
listen.mode = 0660

pm = dynamic
pm.max_children = 8
pm.start_servers = 2
pm.min_spare_servers = 1
pm.max_spare_servers = 4

php_admin_value[open_basedir] = /usr/share/BastionGuard/webui:/var/lib/bastionguard-webui:/tmp:/usr/share/BastionGuard/data:/home
php_admin_value[session.save_path] = /var/lib/bastionguard-webui/sessions
php_admin_value[upload_tmp_dir] = /var/lib/bastionguard-webui/tmp
php_admin_value[sys_temp_dir] = /var/lib/bastionguard-webui/tmp
php_admin_value[error_log] = /var/log/bastionguard-webui/php-error.log
php_admin_flag[log_errors] = on