Run phpfpm exporter in group www-data to allow socket access

[chef.git] / cookbooks / php / resources / fpm.rb

diff --git a/cookbooks/php/resources/fpm.rb b/cookbooks/php/resources/fpm.rb
index 49df4effe105be998f7971ca2199c3906325156d..b63a0c814a2de01e85891fb33bd1019d6670d7a9 100644 (file)
--- a/cookbooks/php/resources/fpm.rb
+++ b/cookbooks/php/resources/fpm.rb
@@ -53,7 +53,9 @@ action :create do
   if new_resource.prometheus_port
     prometheus_exporter "phpfpm" do
       port new_resource.prometheus_port
+      restrict_address_families "AF_UNIX"
       service service_name
+      group "www-data"
       command "server"
       options "--phpfpm.scrape-uri=#{scrape_uri}"
     end