pfSense

#

#	Copyright (C) 2010 Scott Ullrich <sullrich@gmail.com>

#	All rights reserved.

PLATFORM=`/bin/cat /etc/platform`

MIN_REALMEM_FOR_OPCACHE=512

EXTENSIONSDIR="/usr/local/lib/php/20131226/"

# Grab amount of memory that is detected

if [ -f /var/log/dmesg.boot ]; then

	AVAILMEM=`/bin/cat /var/log/dmesg.boot |/usr/bin/awk '/avail memory/ { memory=($4 / 1048576); printf("%0.0f\n", memory); exit}'`

else

	AVAILMEM=`/sbin/dmesg -a |/usr/bin/awk '/avail memory/ { memory=($4 / 1048576); printf("%0.0f\n", memory); exit}'`

fi

if [ -z "$AVAILMEM" ]; then

	MEM=`/sbin/sysctl hw.physmem | cut -d':' -f2`

fi

if [  ${REALMEM} -lt $MIN_REALMEM_FOR_OPCACHE ]; then

	LOWMEM="TRUE"

	echo ">>> Under $MIN_REALMEM_FOR_OPCACHE megabytes of ram detected.  Not enabling opcache"

else

	# Calculate opcache memory size according

	# to detected memory values

		OPCACHEMEMSIZE="10"

	fi

		OPCACHEMEMSIZE="20"

	fi

		OPCACHEMEMSIZE="25"

	fi

		OPCACHEMEMSIZE="30"

	fi

		OPCACHEMEMSIZE="50"

	fi

fi

/usr/bin/sort -u /usr/local/etc/php/extensions.ini > /tmp/extensions.ini

# Set upload directory

if [ "$PLATFORM" = "nanobsd" ]; then

	UPLOADTMPDIR=$(/usr/local/sbin/read_global_var upload_path "/root")

else

	UPLOADTMPDIR="/tmp"

# Define php modules.  Do not add .so, it will

# be done automatically by the script below.

PHPMODULES="standard"

# Config read/write

PHPMODULES="$PHPMODULES SimpleXML xmlreader xmlwriter"

# Downloading via HTTP/FTP (pkg mgr, etc)

PHPMODULES="$PHPMODULES curl date"

# Internationalization

PHPMODULES="$PHPMODULES gettext"

# User manager

PHPMODULES="$PHPMODULES ldap openssl pcntl"

PHPMODULES="$PHPMODULES hash"

PHPMODULES="$PHPMODULES mcrypt"

# Regexs, PERL style!

PHPMODULES="$PHPMODULES pcre"

# The mighty posix!

PHPMODULES="$PHPMODULES posix"

# Login sessions

PHPMODULES="$PHPMODULES session"

# Extra sanity seatbelts

PHPMODULES="$PHPMODULES suhosin"

# Firewall rules edit

PHPMODULES="$PHPMODULES ctype"

# firewall_rules_edit.php

PHPMODULES="$PHPMODULES mbstring"

# Page compression

PHPMODULES="$PHPMODULES zlib"

PHPMODULES="$PHPMODULES PDO"

PHPMODULES="$PHPMODULES sqlite3"

# RADIUS

# ZeroMQ

PHPMODULES="$PHPMODULES zmq"

# SSH2

# pfSense extensions

# json

# bcmath

# filter

PHP_ZEND_MODULES=""

# Modules previously included.

# can be turned on by touching

# /etc/php_dynamodules/$modulename

# Clear the .ini file to make sure we are clean

if [ -f /usr/local/etc/php.ini ]; then

	/bin/rm /usr/local/etc/php.ini

fi

LOADED_MODULES=`/usr/local/bin/php-cgi -m | /usr/bin/grep -v "\["`

unset TIMEZONE

# Fetch the timezone from /var/db/zoneinfo if present

fi

	# Last option, use default value from $g or Etc/UTC

fi

# Get a loaded module list in the stock php

# Populate a dummy php.ini to avoid

/bin/cat >/usr/local/etc/php.ini <<EOF

; File generated from /etc/rc.php_ini_setup

output_buffering = "0"

max_execution_time = 900

max_input_time = 1800

max_input_vars = 5000

register_argc_argv = On

register_long_arrays = Off

variables_order = "GPCS"

file_uploads = On

upload_tmp_dir = ${UPLOADTMPDIR}

upload_max_filesize = 200M

html_errors = Off

zlib.output_compression = Off

zlib.output_compression_level = 1

include_path = ".:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form"

display_startup_errors=on

log_errors=on

extension_dir=${EXTENSIONSDIR}

date.timezone="${TIMEZONE}"

session.hash_bits_per_character = 5

; Extensions

EOF

# Loop through and generate modules to load.

	# Check to see if module is compiled into php statically

	for LM in $LOADED_MODULES; do

		# Ensure extension exists before adding.

		if [ -f "${EXTENSIONSDIR}${EXT}.so" ]; then

			echo "extension=${EXT}.so" >> /usr/local/etc/php.ini

		fi

	fi

# Zend modules

	if [ -f "${EXTENSIONSDIR}${EXT}.so" ]; then

		echo "zend_extension=${EXT}.so" >> /usr/local/etc/php.ini

	fi

if [ "$LOWMEM" != "TRUE" ]; then

	/bin/cat >>/usr/local/etc/php.ini <<EOF

; opcache Settings

EOF

	/bin/cat >>/usr/local/etc/php.ini <<EOF

; opcache Settings

EOF

	/bin/cat >>/usr/local/etc/php.ini <<EOF

[suhosin]

suhosin.get.max_value_length = 500000

suhosin.post.max_array_index_length = 256

suhosin.post.max_value_length = 500000

suhosin.request.max_array_index_length = 256

suhosin.request.max_value_length = 500000

suhosin.memory_limit = 512435456

EOF

PHPFPMMAX=3

if [ $REALMEM -lt 250 ]; then

	PHPFPMMAX=2

elif [ ${REALMEM} -gt 1000 ]; then

syslog.ident = system

log_level = error

daemonize = yes

[nginx]

user = root

; Pass environment variables

env[LOGNAME] = root

EOF

if [ $REALMEM -lt 350 ]; then

	/bin/cat >> /usr/local/lib/php-fpm.conf <<EOF

pm.max_children = $PHPFPMMAX

pm.max_requests = 500

pm.max_children = $PHPFPMMAX

pm.start_servers = 1

pm.max_children = $PHPFPMMAX

pm.max_requests = 500

# Remove old log file if it exists.

	/bin/rm /var/run/php_modules_load_errors.txt

fi

for EXT in $PHPMODULES; do

	PHPMODULESLC="$PHPMODULESLC `echo "$EXT" | /usr/bin/tr '[:upper:]' '[:lower:]'`"

done

# Check loaded modules and remove anything that did not load correctly

LOADED_MODULES=`/usr/local/bin/php-cgi -m | /usr/bin/tr '[:upper:]' '[:lower:]' 2>/dev/null | /usr/bin/grep -v "\["`

for EXT in $PHPMODULESLC; do

	SHOULDREMOVE="true"

		fi

	done

	# Handle low memory situations

	if [ "$LOWMEM" = "TRUE" ]; then

		if [ "$EXT" = "opcache" ]; then

			SHOULDREMOVE="true"

	if [ "$SHOULDREMOVE" = "true" ]; then

			/bin/cat /usr/local/etc/php.ini | /usr/bin/grep -v $EXT > /tmp/php.ini

		fi