(I see there are several existing questions about 403 errors and one or two of the rest of the parts of my configuration, but nothing that seems to match up to my exact situation that I've seen so far, and I'm unsure how to proceed as a result.)
I have a staging site on a CentOS 7 server (CentOS Linux release 7.6.1810 (Core)) running Apache/2.4.6. The root of the site is
/var/www/<sitename>/web-ssl. It's a Drupal 8.6.12 site, PHP 7.1.27.
Today, I performed the following steps to change apache from using prefork MPM to event MPM, and to use php-fpm:
yum install php71w-fpm
SetHandler "proxy:fcgi://127.0.0.1:9000" to
/etc/httpd/conf.d/php.conf (the full content of my php.conf is as follows):
# # Cause the PHP interpreter to handle files with a .php extension. # AddHandler php7-script .php AddType text/html .php SetHandler "proxy:fcgi://127.0.0.1:9000" # # Add index.php to the list of files that will be served as directory # indexes. # DirectoryIndex index.php # # Uncomment the following line to allow PHP to pretty-print .phps # files as PHP source code: # #AddType application/x-httpd-php-source .phps # # Apache specific PHP configuration options # those can be override in each configured vhost # php_value session.save_handler "files" php_value session.save_path "/var/lib/php/session" php_value soap.wsdl_cache_dir "/var/lib/php/wsdlcache"
3) Uncommented the mpm_event line in 00-mpm.conf, commented out the mpm_prefork line
systemctl enable php-fpm systemctl start php-fpm systemctl restart httpd
/etc/php-fpm.d/, in both
<sitename>.conf I have the uncommented lines
user = apache and
group = apache and
listen = 127.0.0.1:9000.
My site is running, but all JS and CSS files are now failing to load with 403 errors. The owner and group on these files are both "apache". As Drupal uses tons of these files I did not check the permission values on each individual file, but this is occurring with at least both 755 and 644. I myself did not change any file permissions today.
I think this is related to the proxy line in php.conf, but I have no idea what to do about that.