php-fpm: Add netdata collectors.

roles/nginx/templates/nginx-site.conf.j2

@@ -72,7 +72,13 @@ server {
         allow 127.0.0.1;
         deny all;
     }
-    {%- endif %}
+    {% if nginx_php_fpm -%}
+    location = /fpm_status {
+      # Ensure PHP-FPM status page is not reachable from Nginx
+      access_log off;
+      deny all;
+    }
+    {%- endif %}{%- endif %}
 
     # Starting Extra security configuration
     # =====================================

roles/php_fpm/tasks/main.yml

@@ -112,6 +112,10 @@
     name: php-fpm
     enabled: true
 
+- name: Netdata configuration
+  ansible.builtin.include_tasks: netdata.yml
+  when: common_netdata_enable | bool
+
 - name: Ensure PHP-FPM "rpmnew" and "rpmsave" files are absent
   ansible.builtin.file:
     path: "{{ item }}"

roles/php_fpm/tasks/netdata.yml

@@ -0,0 +1,19 @@
+---
+
+- name: Ensure Netdata configuration directory is present
+  ansible.builtin.file:
+    path: /etc/netdata/go.d
+    state: directory
+    mode: '0755'
+
+- name: Ensure Netdata collectors are configured
+  ansible.builtin.template:
+    src: netdata_phpfpm.conf.j2
+    dest: /etc/netdata/go.d/phpfpm.conf
+    mode: '0644'
+
+- name: Ensure Systemd Netdata service is restarted
+  ansible.builtin.systemd:
+    name: netdata
+    state: restarted
+  changed_when: false

roles/php_fpm/templates/netdata_phpfpm.conf.j2

@@ -0,0 +1,4 @@
+jobs:
+  - name: local
+    socket: /var/run/php-fpm/{{ php_fpm_site }}.sock
+    fcgi_path: /fpm_status

roles/php_fpm/templates/php-fpm.conf.j2

@@ -15,6 +15,10 @@ pm.max_spare_servers = 18
 pm.max_requests = {{ php_fpm_max_requests }}
 request_terminate_timeout = {{ php_fpm_request_terminate_timeout }}
 
+{% if common_netdata_enable is defined -%}
+pm.status_path = /fpm_status
+{%- endif %}
+
 env[HOSTNAME] = $HOSTNAME
 env[TMP] = /tmp
 env[TMPDIR] = /tmp