fix: php-fpm config — non-root user, sane pm defaults

- user/group: root -> nobody (security hardening)
- pm.max_children: 500 -> 20 (500 * ~40MB = 20GB, unreasonable default)
- pm.start_servers: 60 -> 4
- pm.min_spare_servers: 25 -> 2
- pm.max_spare_servers: 100 -> 10
- Add comment guiding operators to tune pm values for their workload
Source: https://www.php.net/manual/en/install.fpm.configuration.php

Author: josecarlospeer-cloud

8.1/rootfs/etc/php81/php-fpm.conf

@@ -1,22 +1,26 @@
+; Source: https://www.php.net/manual/en/install.fpm.configuration.php
 [global]
 emergency_restart_threshold = 10
 emergency_restart_interval = 1m
 process_control_timeout = 10
 error_log = /proc/self/fd/2
 
 [www]
-user = root
-group = root
+; Run as unprivileged user (override via PHP_FPM_USER/PHP_FPM_GROUP env if needed)
+user = nobody
+group = nobody
 listen = [::]:9000
 chdir = /app
 
 access.log = /proc/self/fd/1
 
 pm = dynamic
-pm.max_children = 500
-pm.start_servers = 60
-pm.min_spare_servers = 25
-pm.max_spare_servers = 100
+; Conservative defaults — tune for your workload
+; Rule of thumb: (available_memory / ~40MB_per_worker)
+pm.max_children = 20
+pm.start_servers = 4
+pm.min_spare_servers = 2
+pm.max_spare_servers = 10
 pm.max_requests = 1000
 
 listen.backlog = -1

8.2/rootfs/etc/php82/php-fpm.conf

@@ -1,22 +1,26 @@
+; Source: https://www.php.net/manual/en/install.fpm.configuration.php
 [global]
 emergency_restart_threshold = 10
 emergency_restart_interval = 1m
 process_control_timeout = 10
 error_log = /proc/self/fd/2
 
 [www]
-user = root
-group = root
+; Run as unprivileged user (override via PHP_FPM_USER/PHP_FPM_GROUP env if needed)
+user = nobody
+group = nobody
 listen = [::]:9000
 chdir = /app
 
 access.log = /proc/self/fd/1
 
 pm = dynamic
-pm.max_children = 500
-pm.start_servers = 60
-pm.min_spare_servers = 25
-pm.max_spare_servers = 100
+; Conservative defaults — tune for your workload
+; Rule of thumb: (available_memory / ~40MB_per_worker)
+pm.max_children = 20
+pm.start_servers = 4
+pm.min_spare_servers = 2
+pm.max_spare_servers = 10
 pm.max_requests = 1000
 
 listen.backlog = -1

8.3/rootfs/etc/php83/php-fpm.conf

@@ -1,22 +1,26 @@
+; Source: https://www.php.net/manual/en/install.fpm.configuration.php
 [global]
 emergency_restart_threshold = 10
 emergency_restart_interval = 1m
 process_control_timeout = 10
 error_log = /proc/self/fd/2
 
 [www]
-user = root
-group = root
+; Run as unprivileged user (override via PHP_FPM_USER/PHP_FPM_GROUP env if needed)
+user = nobody
+group = nobody
 listen = [::]:9000
 chdir = /app
 
 access.log = /proc/self/fd/1
 
 pm = dynamic
-pm.max_children = 500
-pm.start_servers = 60
-pm.min_spare_servers = 25
-pm.max_spare_servers = 100
+; Conservative defaults — tune for your workload
+; Rule of thumb: (available_memory / ~40MB_per_worker)
+pm.max_children = 20
+pm.start_servers = 4
+pm.min_spare_servers = 2
+pm.max_spare_servers = 10
 pm.max_requests = 1000
 
 listen.backlog = -1