From 4e53248d4df8137a46afa2faeabfc5ebb792f5ba Mon Sep 17 00:00:00 2001 From: Grant Slater Date: Wed, 21 Oct 2026 17:39:14 +0300 Subject: [PATCH] PHP: lower post_max_size to 32M for now --- cookbooks/mediawiki/resources/site.rb | 2 +- cookbooks/php/templates/default/pool.conf.erb | 1 + cookbooks/wordpress/resources/site.rb | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/cookbooks/mediawiki/resources/site.rb b/cookbooks/mediawiki/resources/site.rb index 4ac0a18dd..271d6a3d4 100644 --- a/cookbooks/mediawiki/resources/site.rb +++ b/cookbooks/mediawiki/resources/site.rb @@ -582,7 +582,7 @@ action :create do php_values "memory_limit" => "500M", "max_execution_time" => "60", "upload_max_filesize" => "70M", - "post_max_size" => "100M" + "post_max_size" => "32M" prometheus_port new_resource.fpm_prometheus_port end diff --git a/cookbooks/php/templates/default/pool.conf.erb b/cookbooks/php/templates/default/pool.conf.erb index 290fdb7d3..2c69994a8 100644 --- a/cookbooks/php/templates/default/pool.conf.erb +++ b/cookbooks/php/templates/default/pool.conf.erb @@ -27,6 +27,7 @@ security.limit_extensions = .php .phpx .phpj ; CVE-2026-109618 and CVE-2026-109619 mitigation php_admin_flag[session.upload_progress.enabled] = Off +php_admin_value[post_max_size] = 32M <% @environment.each do |name, value| -%> env[<%= name %>] = <%= value %> diff --git a/cookbooks/wordpress/resources/site.rb b/cookbooks/wordpress/resources/site.rb index 6f54f083f..c09787a09 100644 --- a/cookbooks/wordpress/resources/site.rb +++ b/cookbooks/wordpress/resources/site.rb @@ -177,7 +177,7 @@ action :create do php_admin_values "open_basedir" => "#{site_directory}/:/usr/share/php/:/tmp/", "disable_functions" => "exec,shell_exec,system,passthru,popen,proc_open" php_values "upload_max_filesize" => "70M", - "post_max_size" => "100M", + "post_max_size" => "32M", "memory_limit" => "368M" prometheus_port new_resource.fpm_prometheus_port end -- 2.47.3