[Feat] Per-site PHP runtime settings (#1180)

* php settings

* fixes

* documentation

* doc tweak

Author: RichardAnderson

app/Actions/Site/UpdatePHPSettings.php

@@ -0,0 +1,72 @@
+<?php
+
+namespace App\Actions\Site;
+
+use App\Exceptions\SSHError;
+use App\Models\Site;
+use Illuminate\Support\Facades\Validator;
+
+class UpdatePHPSettings
+{
+    /**
+     * @param  array<string, mixed>  $input
+     *
+     * @throws SSHError
+     */
+    public function update(Site $site, array $input): void
+    {
+        $validated = $this->validate($input);
+
+        $typeData = $site->type_data ?? [];
+        $typeData['php'] = $validated;
+        $site->update(['type_data' => $typeData]);
+
+        $site->webserver()->updateVHost($site);
+
+        app(BroadcastSiteUpdate::class)->broadcast($site);
+    }
+
+    /**
+     * @param  array<string, mixed>  $input
+     * @return array{max_upload_size: int|null, max_execution_time: int|null, memory_limit: int|null, max_input_vars: int|null}
+     */
+    private function validate(array $input): array
+    {
+        $validator = Validator::make($input, [
+            'max_upload_size' => ['nullable', 'integer', 'min:1', 'max:10240'],
+            'max_execution_time' => ['nullable', 'integer', 'min:1', 'max:3600'],
+            'memory_limit' => ['nullable', 'integer', 'min:16', 'max:8192'],
+            'max_input_vars' => ['nullable', 'integer', 'min:100', 'max:100000'],
+        ]);
+
+        $validator->after(function ($validator) use ($input): void {
+            if ($validator->errors()->hasAny(['max_upload_size', 'memory_limit'])) {
+                return;
+            }
+
+            $upload = $input['max_upload_size'] ?? null;
+            $memory = $input['memory_limit'] ?? null;
+
+            if (is_numeric($upload) && is_numeric($memory) && (int) $memory < (int) $upload) {
+                $validator->errors()->add(
+                    'memory_limit',
+                    'The memory limit must be greater than or equal to the max upload size.'
+                );
+            }
+        });
+
+        $validated = $validator->validate();
+
+        return [
+            'max_upload_size' => $this->intOrNull($validated['max_upload_size'] ?? null),
+            'max_execution_time' => $this->intOrNull($validated['max_execution_time'] ?? null),
+            'memory_limit' => $this->intOrNull($validated['memory_limit'] ?? null),
+            'max_input_vars' => $this->intOrNull($validated['max_input_vars'] ?? null),
+        ];
+    }
+
+    private function intOrNull(mixed $value): ?int
+    {
+        return is_numeric($value) ? (int) $value : null;
+    }
+}

app/Actions/Webserver/AbstractGenerateConfig.php

@@ -12,6 +12,8 @@
 
 abstract class AbstractGenerateConfig
 {
+    protected const PHP_VALUE_TOKEN = '@@VITO_PHP_VALUE@@';
+
     /**
      * Generate the full vhost config for a site.
      */
@@ -26,7 +28,9 @@ public function generate(Site $site, ?string $template = null): string
             'escape' => fn ($value) => $value,
         ]);
 
-        return format_webserver_config($engine->render($template, $data));
+        $rendered = format_webserver_config($engine->render($template, $data));
+
+        return str_replace(self::PHP_VALUE_TOKEN, $data['php_value_string'], $rendered);
     }
 
     /**
@@ -197,6 +201,9 @@ protected function buildCommonData(Site $site, string $primaryDomain): array
         $isOctane = (bool) data_get($site->type_data, 'octane', false);
         $isPhp = ($siteTypeData['is_php'] ?? false) && ! $isOctane;
 
+        $phpEnabled = $isPhp && $site->vhost_template === null;
+        $phpValueString = $phpEnabled ? $this->phpValueDirectives($site) : '';
+
         $basicAuth = data_get($site->type_data, 'basic_auth', []);
         $basicAuthEnabled = ! empty($basicAuth['enabled']) && ! empty($basicAuth['users']);
 
@@ -211,6 +218,10 @@ protected function buildCommonData(Site $site, string $primaryDomain): array
             'is_octane' => $isOctane,
             'octane_port' => data_get($site->type_data, 'octane_port', 8000),
             'php_socket' => $isPhp ? $this->buildPhpSocket($site) : '',
+            'php_value' => $phpValueString !== '',
+            'php_value_string' => $phpValueString,
+            'php_max_upload_size' => $phpEnabled ? $this->phpSetting($site, 'max_upload_size') : null,
+            'php_max_execution_time' => $phpEnabled ? $this->phpSetting($site, 'max_execution_time') : null,
             'port' => $site->port,
             'redirects' => $this->buildRedirects($site),
             'type_data' => $site->type_data ?? [],
@@ -240,6 +251,7 @@ protected function enrichServerBlocks(array $blocks, array $data): array
             $block['is_octane'] = $data['is_octane'];
             $block['octane_port'] = $data['octane_port'];
             $block['php_socket'] = $data['php_socket'];
+            $block['php_value'] = $data['php_value'];
             $block['port'] = $data['port'];
             $block['redirects'] = $data['redirects'];
             $block['basic_auth_enabled'] = $data['basic_auth_enabled'];
@@ -266,4 +278,44 @@ protected function buildRedirects(Site $site): array
 
         return $redirects;
     }
+
+    /**
+     * Build the multi-line PHP_VALUE directive string from the site's
+     * per-site PHP settings (type_data['php']). Empty when nothing is set.
+     */
+    protected function phpValueDirectives(Site $site): string
+    {
+        $directives = [];
+
+        $upload = $this->phpSetting($site, 'max_upload_size');
+        if ($upload !== null) {
+            $directives[] = "upload_max_filesize={$upload}M";
+            $directives[] = "post_max_size={$upload}M";
+        }
+
+        $execution = $this->phpSetting($site, 'max_execution_time');
+        if ($execution !== null) {
+            $directives[] = "max_execution_time={$execution}";
+            $directives[] = "max_input_time={$execution}";
+        }
+
+        $memory = $this->phpSetting($site, 'memory_limit');
+        if ($memory !== null) {
+            $directives[] = "memory_limit={$memory}M";
+        }
+
+        $inputVars = $this->phpSetting($site, 'max_input_vars');
+        if ($inputVars !== null) {
+            $directives[] = "max_input_vars={$inputVars}";
+        }
+
+        return implode("\n", $directives);
+    }
+
+    protected function phpSetting(Site $site, string $key): ?int
+    {
+        $value = data_get($site->type_data, "php.{$key}");
+
+        return is_numeric($value) ? (int) $value : null;
+    }
 }

app/Actions/Webserver/GenerateCaddyConfig.php

@@ -80,6 +80,9 @@ protected function enrichServerBlock(array $block, array $data): array
     {
         $block['lb_servers'] = $data['lb_servers'];
         $block['lb_policy'] = $data['lb_policy'];
+        $block['request_body_max_size'] = $data['php_max_upload_size'] !== null
+            ? $data['php_max_upload_size'].'MB'
+            : false;
 
         return $block;
     }

app/Actions/Webserver/GenerateNginxConfig.php

@@ -84,6 +84,12 @@ protected function transformDomains(array $domains, bool $httpOnly): array
     protected function enrichServerBlock(array $block, array $data): array
     {
         $block['upstream_name'] = $data['upstream_name'];
+        $block['client_max_body_size'] = $data['php_max_upload_size'] !== null
+            ? $data['php_max_upload_size'].'M'
+            : false;
+        $block['fastcgi_read_timeout'] = $data['php_max_execution_time'] !== null
+            ? $data['php_max_execution_time'].'s'
+            : false;
 
         return $block;
     }

app/Http/Controllers/SiteSettingController.php

@@ -6,6 +6,7 @@
 use App\Actions\Site\PreviewVhost;
 use App\Actions\Site\UpdateBasicAuth;
 use App\Actions\Site\UpdateBranch;
+use App\Actions\Site\UpdatePHPSettings;
 use App\Actions\Site\UpdatePHPVersion;
 use App\Actions\Site\UpdatePort;
 use App\Actions\Site\UpdateSiteStats;
@@ -88,6 +89,21 @@ public function updatePHPVersion(Request $request, Server $server, Site $site):
         return back()->with('success', 'PHP version updated successfully.');
     }
 
+    /**
+     * @throws SSHError
+     */
+    #[Patch('/php-settings', name: 'site-settings.update-php-settings')]
+    public function updatePHPSettings(Request $request, Server $server, Site $site): RedirectResponse
+    {
+        $this->authorize('update', [$site, $server]);
+
+        abort_unless($site->supportsPhpSettings(), 404);
+
+        app(UpdatePHPSettings::class)->update($site, $request->input());
+
+        return back()->with('success', 'PHP settings updated successfully.');
+    }
+
     /**
      * @throws SSHError
      */

app/Http/Resources/SiteResource.php

@@ -35,6 +35,8 @@ public function toArray(Request $request): array
             'webserver_creates_site_ssls' => $this->webserver()->createsSiteSSLs(),
             'path' => $this->path,
             'php_version' => $this->php_version,
+            'php_settings' => $this->phpSettings(),
+            'supports_php_settings' => $this->supportsPhpSettings(),
             'repository' => $this->repository,
             'branch' => $this->branch,
             'status' => $this->status->getText(),
@@ -78,6 +80,8 @@ private function sanitisedTypeData(): array
     {
         $typeData = $this->type_data ?? [];
 
+        unset($typeData['php']);
+
         if (isset($typeData['basic_auth']['users']) && is_array($typeData['basic_auth']['users'])) {
             $typeData['basic_auth']['users'] = array_map(
                 fn (array $u) => ['username' => $u['username'] ?? ''],

app/Models/Site.php

@@ -204,6 +204,11 @@ public function getWarnings(): array
             $warnings[] = ['key' => 'vhost_generation_disabled'];
         }
 
+        if ($this->vhost_template !== null
+            && array_filter($this->phpSettings(), fn ($v) => $v !== null) !== []) {
+            $warnings[] = ['key' => 'php_settings_ignored'];
+        }
+
         $expiring = $hostedDomains->filter(
             fn ($hd) => $hd->ssl_id
                 && $hd->relationLoaded('ssl')
@@ -506,6 +511,41 @@ public function php(): ?Service
         return null;
     }
 
+    public function supportsPhpSettings(): bool
+    {
+        if (! $this->php_version) {
+            return false;
+        }
+
+        $isPhp = (bool) ($this->type()->vhostData()['is_php'] ?? false);
+        $isOctane = (bool) data_get($this->type_data, 'octane', false);
+
+        return $isPhp
+            && ! $isOctane
+            && $this->vhost_generation_enabled
+            && $this->vhost_template === null;
+    }
+
+    /**
+     * @return array{max_upload_size: int|null, max_execution_time: int|null, memory_limit: int|null, max_input_vars: int|null}
+     */
+    public function phpSettings(): array
+    {
+        return [
+            'max_upload_size' => $this->phpSetting('max_upload_size'),
+            'max_execution_time' => $this->phpSetting('max_execution_time'),
+            'memory_limit' => $this->phpSetting('memory_limit'),
+            'max_input_vars' => $this->phpSetting('max_input_vars'),
+        ];
+    }
+
+    private function phpSetting(string $key): ?int
+    {
+        $value = data_get($this->type_data, "php.{$key}");
+
+        return is_numeric($value) ? (int) $value : null;
+    }
+
     public function getUrl(): string
     {
         if ($this->ssl_enabled) {

docs/4.x/sites/settings.md

@@ -2,8 +2,8 @@
 
 ## Introduction
 
-In the Settings page you can manage your site's details, its PHP version, web directory, vhost
-template, basic auth, and more.
+In the Settings page you can manage your site's details, its PHP version and PHP settings, web
+directory, vhost template, basic auth, and more.
 
 ## Site details
 
@@ -18,6 +18,36 @@ You can change the PHP version of each website in their Settings page.
 Make sure that the PHP version you want to use is already installed in the [PHP](../servers/php#install-and-uninstall)
 page.
 
+## Configure PHP Settings
+
+For PHP sites you can tune common per-site PHP runtime limits without editing any files. Click
+**Configure** next to the PHP version on the Settings page to set:
+
+- **Max upload size** — the largest file that can be uploaded (MB).
+- **Max execution time** — how long a request may run (seconds).
+- **Memory limit** — the maximum memory a request may use (MB).
+- **Max input vars** — the maximum number of input variables, e.g. form fields.
+
+Leave a field empty to use the server's default. Vito applies these to the site's vhost (via FastCGI
+`PHP_VALUE`, together with `client_max_body_size`/`fastcgi_read_timeout` on nginx and `request_body`
+on Caddy), so they take effect for requests served through nginx/Caddy and are preserved across
+deployments. They do not affect the PHP CLI.
+
+Where a value is left unset, the server default applies. PHP defaults to 2 MB uploads, a 30s
+execution time, a 128 MB memory limit, and 1000 input vars; on nginx, requests are additionally
+capped at 1 MB (body size) and 60s until you raise them here.
+
+:::tip
+These settings are per-site. PHP-FPM process pools are shared per system user, so process-manager
+tuning (such as `pm.max_children`) is not configured here.
+:::
+
+:::warning
+Configuration is available only for PHP sites that use automatic vhost generation and the default
+vhost template. If you use a custom vhost template, add the directives to your template manually — a
+banner warns you when stored PHP settings cannot be applied.
+:::
+
 ## Change branch
 
 You can change the branch of your cloned repository in the Settings page.

resources/js/components/dialogs/registry.ts

@@ -31,6 +31,7 @@ import RestoreBackup from '@/pages/backups/components/restore-backup';
 import SiteFeatureAction from '@/pages/site-features/components/feature-action';
 import ServerFeatureAction from '@/pages/server-features/components/feature-action';
 import Fail2banForm from '@/pages/security/components/fail2ban-form';
+import PhpSettingsDialog from '@/pages/site-settings/components/php-settings-dialog';
 
 export type DialogControlProps = { open: boolean; onOpenChange: (open: boolean) => void };
 
@@ -79,6 +80,7 @@ export const dialogs = {
   siteFeatureAction: SiteFeatureAction,
   serverFeatureAction: ServerFeatureAction,
   fail2banForm: Fail2banForm,
+  phpSettings: PhpSettingsDialog,
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
 } as const satisfies Record<string, ComponentType<any>>;
 

resources/js/components/site-banners.tsx

@@ -107,6 +107,7 @@ export default function SiteBanners({ site }: { site: Site }) {
   const pendingDomainsWarning = warnings.find((w) => w.key === 'pending_domains');
   const sslDisabledWarning = warnings.find((w) => w.key === 'ssl_disabled');
   const vhostWarning = warnings.find((w) => w.key === 'vhost_generation_disabled');
+  const phpSettingsIgnoredWarning = warnings.find((w) => w.key === 'php_settings_ignored');
   const sslExpiringWarning = warnings.find((w) => w.key === 'ssl_expiring');
   const needsFirstDeployWarning = warnings.find((w) => w.key === 'needs_first_deploy');
   const workerWarnings = warnings.filter((w): w is Extract<SiteWarning, { key: 'worker_not_running' }> => w.key === 'worker_not_running');
@@ -205,6 +206,26 @@ export default function SiteBanners({ site }: { site: Site }) {
     });
   }
 
+  if (phpSettingsIgnoredWarning) {
+    items.push({
+      key: 'php-settings-ignored',
+      title: 'PHP settings are not applied',
+      description: (
+        <>
+          This site has custom PHP settings, but a custom VHost template is in use so they are not written to the server. Add the directives to your
+          template manually, or reset the template to apply them automatically.
+        </>
+      ),
+      action: (
+        <Link href={route('site-settings', { server: site.server_id, site: site.id })}>
+          <Button variant="outline" size="sm">
+            Go to Settings
+          </Button>
+        </Link>
+      ),
+    });
+  }
+
   if (needsFirstDeployWarning) {
     items.push({
       key: 'needs-first-deploy',