prepare changes to run kdav through kweb as well (#424)

* prepare changes to run kdav through kweb as well
* add kdav configuration
* add remaining kdav configuration for kweb
* import remaining kweb/php-fpm config from https://stash.kopano.io/projects/PKG/repos/kopano-one-php-fpm/browse

webapp/Dockerfile

@@ -70,6 +70,7 @@ RUN mkdir -p /tmp/webapp/ && \
         ln -s /tmp/webapp/"$(basename "$i")" "$i"; \
     done
 
+COPY kopano-webapp.conf /etc/php/7.3/fpm/pool.d/
 COPY kweb.cfg /etc/kweb.cfg
 COPY start.sh /kopano/start.sh
 COPY goss* /goss/

webapp/kopano-webapp.conf

@@ -0,0 +1,47 @@
+[kopano-webapp]
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions.
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+
+listen = /run/php/php-fpm-kopano-webapp.sock
+
+; Pool configuration intended for up to 500 users.
+pm = dynamic
+pm.max_children = 100
+pm.start_servers = 10
+pm.min_spare_servers = 10
+pm.max_spare_servers = 50
+pm.process_idle_timeout = 60s
+pm.max_requests = 500
+pm.status_path = /status
+
+ping.path = /ping
+ping.response = pong
+
+security.limit_extensions = .php
+
+php_flag[display_errors] = off
+
+php_admin_value[max_execution_time] = 60
+php_admin_value[post_max_size] = 20M
+php_admin_value[upload_max_filesize] = 20M
+php_admin_value[memory_limit] = 32M
+
+php_admin_flag[log_errors] = on
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environement, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+catch_workers_output = no

webapp/kweb.cfg

@@ -6,9 +6,26 @@
 	status 200 /status
 
 	alias /webapp/ /usr/share/kopano-webapp/
-	fastcgi2 /webapp/ /run/php/php7.3-fpm.sock php {
+	fastcgi2 /webapp/ /run/php/php-fpm-kopano-webapp.sock php {
 		without /webapp/
 		root /usr/share/kopano-webapp/
 	}
+
+	status 403 {
+		/webapp/config.php
+		/webapp/debug.php
+		/webapp/defaults.php
+		/webapp/init.php
+		/webapp/server
+		/webapp/version
+
+		/webapp/plugins/forbidden
+	}
+
+	rewrite /webapp/plugins/ {
+		regexp config.php
+		to /webapp/plugins/forbidden
+	}
+
 	folderish /webapp
 }