; Apply to the PHP-FPM runtime, not just the PHP CLI configuration.
; Tune values with the host's capacity and Ministry policy.
expose_php = Off
display_errors = Off
log_errors = On
error_reporting = E_ALL

; Uploaded supporting documents are limited by the application to 5 MiB.
file_uploads = On
upload_max_filesize = 6M
post_max_size = 8M
max_file_uploads = 10
max_execution_time = 30
memory_limit = 128M
max_input_vars = 2000

; PHP sessions are additionally configured by the application at runtime.
session.use_strict_mode = 1
session.use_only_cookies = 1
session.cookie_httponly = 1
session.cookie_secure = 1
session.cookie_samesite = Lax

; Avoid PATH_INFO script resolution surprises.
cgi.fix_pathinfo = 0