From 8b54369912c80786b146094eb6a6853cc41d65d3 Mon Sep 17 00:00:00 2001
From: Jean-Baptiste VESLIN <19856429+thebaptiste@users.noreply.github.com>
Date: Tue, 16 Dec 2025 10:36:46 +0100
Subject: [PATCH] fix: don't expose php version (#42)

(cherry picked from commit fef66a99ddc56bb066f004973edd6b6398bc2146)
---
 layers/layer1_php/0010_php/Makefile.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/layers/layer1_php/0010_php/Makefile.mk b/layers/layer1_php/0010_php/Makefile.mk
index 5d6d541..d694cc2 100644
--- a/layers/layer1_php/0010_php/Makefile.mk
+++ b/layers/layer1_php/0010_php/Makefile.mk
@@ -22,6 +22,7 @@ $(PREFIX)/bin/php:
 	mv $(PREFIX)/etc/php-fpm.d/www.conf.default $(PREFIX)/etc/php-fpm.d/www.conf
 
 	# configure php-fpm
+	sed -i 's/^expose_php = On/expose_php = Off/g' $(PREFIX)/lib/php.ini
 	sed -i 's/^user = nobody/;user = nobody/g' $(PREFIX)/etc/php-fpm.d/www.conf
 	sed -i 's/^group = nobody/;group = nobody/g' $(PREFIX)/etc/php-fpm.d/www.conf
 	sed -i 's/^listen = .*/listen = {{PHP_SOCKET_PATH}}/g' $(PREFIX)/etc/php-fpm.d/www.conf