Gecko [ www.koliacaobang.vn ]

Name	Size	Permission	Date
basic.target.wants	[ DIR ]	drwxr-xr-x	2018-06-02 11:12
cloud-init.target.wants	[ DIR ]	drwxr-xr-x	2024-05-02 07:55
default.target.wants	[ DIR ]	drwxr-xr-x	2018-06-02 11:11
dev-virtio\x2dports-org.qemu.guest_agent.0.device.wants	[ DIR ]	drwxr-xr-x	2018-06-02 11:12
getty.target.wants	[ DIR ]	drwxr-xr-x	2018-06-02 11:11
imunify-antivirus.service.d	[ DIR ]	drwxr-xr-x	2026-06-08 20:47
local-fs.target.wants	[ DIR ]	drwxr-xr-x	2018-06-02 11:11
mariadb.service.d	[ DIR ]	drwxr-xr-x	2025-05-15 11:09
multi-user.target.wants	[ DIR ]	drwxr-xr-x	2025-08-04 20:49
sockets.target.wants	[ DIR ]	drwxr-xr-x	2025-08-04 20:49
sysinit.target.wants	[ DIR ]	drwxr-xr-x	2018-06-02 11:11
system-update.target.wants	[ DIR ]	drwxr-xr-x	2018-06-02 11:11
da-popb4smtp.service	414 B	-rw-r--r--	2018-06-02 11:42
default.target	492 B	-rw-r--r--	2023-12-07 14:51
directadmin.service	581 B	-rw-r--r--	2025-05-15 10:01
dovecot.service	476 B	-rw-r--r--	2024-05-02 09:45
exim.service	417 B	-rw-r--r--	2025-05-15 10:01
httpd.service	1017 B	-rw-r--r--	2024-05-02 08:49
mariadb.service	4.11 KB	-rw-r--r--	2020-03-11 19:53
mysql.service	4.11 KB	-rw-r--r--	2020-03-11 19:53
mysqld.service	4.11 KB	-rw-r--r--	2020-03-11 19:53
named.service	824 B	-rw-r--r--	2018-04-12 18:48
nginx.service	593 B	-rw-r--r--	2024-05-02 09:26
php-fpm74.service	2.61 KB	-rw-r--r--	2025-05-15 11:15
php-fpm81.service	2.61 KB	-rw-r--r--	2025-05-15 11:21
pure-certd.service	198 B	-rw-r--r--	2024-05-02 09:32
pure-ftpd.service	375 B	-rw-r--r--	2024-05-02 09:32
startips.service	380 B	-rw-r--r--	2018-06-02 11:40

Rename

# php-fpm startup for DirectAdmin servers
# To alter the FPM environment, drop a file with the suffix
# .conf in /etc/systemd/system/php-fpm.service.d, with
#     [Service]
#     Environment=FOO=bar
# To reload systemd daemon after changes to this file:
# systemctl --system daemon-reload

[Unit]
Description=The PHP FastCGI Process Manager
After=syslog.target network.target

[Service]
Type=notify
PIDFile=/run/php-fpm74.pid
ExecStart=/usr/local/php74/sbin/php-fpm74 --nodaemonize --pid=/run/php-fpm74.pid
ExecReload=/bin/kill -USR2 $MAINPID
LimitMEMLOCK=infinity
LimitNOFILE=65535

# Set up a new file system namespace and mounts private /tmp and /var/tmp directories
# so this service cannot access the global directories and other processes cannot
# access this service's directories.
PrivateTmp=true

# Sets up a new /dev namespace for the executed processes and only adds API pseudo devices
# such as /dev/null, /dev/zero or /dev/random (as well as the pseudo TTY subsystem) to it,
# but no physical devices such as /dev/sda.
# CageFS does not work with php-fpm on DirectAdmin servers. The issue is caused by this directive set to true, thus, commented out
#PrivateDevices=true

# Attempts to create memory mappings that are writable and executable at the same time,
# or to change existing memory mappings to become executable are prohibited.

# Commented out, problems with PHP 7.0/7.1 reported
#MemoryDenyWriteExecute=true

# Explicit module loading will be denied. This allows to turn off module load and unload
# operations on modular kernels. It is recommended to turn this on for most services that
# do not need special file systems or extra kernel modules to work.
ProtectKernelModules=true

# Kernel variables accessible through /proc/sys, /sys, /proc/sysrq-trigger, /proc/latency_stats,
# /proc/acpi, /proc/timer_stats, /proc/fs and /proc/irq will be made read-only to all processes
# of the unit. Usually, tunable kernel variables should only be written at boot-time, with the
# sysctl.d(5) mechanism. Almost no services need to write to these at runtime; it is hence
# recommended to turn this on for most services.
ProtectKernelTunables=true

# Required for resource throttling
ProtectControlGroups=false

# Any attempts to enable realtime scheduling in a process of the unit are refused.
RestrictRealtime=true

# Restricts the set of socket address families accessible to the processes of this unit.
# Protects against vulnerabilities such as CVE-2016-8655
RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX

# Takes away the ability to create or manage any kind of namespace
#RestrictNamespaces=true

[Install]
WantedBy=multi-user.target