菜单
Apache2 (httpd) configuration and ops for PHP services — vhosts, MPM tuning, PHP-FPM via mod_proxy_fcgi, mod_rewrite, TLS/HTTP2, compression/caching, hardening, and diagnosing 5xx/perf issues. Use for web-server config, deployment topology, and Apache performance/security.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Test automation strategy and engineering across the pyramid — unit, integration, API/contract, and end-to-end. Use for designing a test strategy, building API/E2E suites, CI test pipelines, fixtures/factories, flake reduction, and coverage of a REST microservice. Complements phpunit-testing for cross-cutting and higher-level testing.
MySQL schema design, indexing, and query tuning. Use when modeling tables, choosing types/keys, writing or optimizing SQL, reading EXPLAIN output, or resolving slow queries, deadlocks, and transaction issues.
Modern PHP 8.4/8.5 authoring and review. Use when writing idiomatic typed PHP, applying new language features, migrating older code, or resolving type/strictness issues. State the minimum PHP version any recent feature requires.
PHP performance — profiling, removing hotspots, cutting latency/memory, OPcache/JIT/preloading, eliminating N+1, efficient structures, generators/streaming, connection reuse, benchmarking. Use when something is slow or memory-heavy, or to validate an optimization. Measure first.
Redis from PHP — caching, sessions, rate limiting, locks, queues/streams, pub/sub, sorted-set patterns, TTL/eviction. Use when adding Redis to a feature, designing key schemes, or fixing cache correctness/stampede issues.
Defensive application security for PHP/web services — secure coding review, input validation, authn/authz, session/token security, injection/XSS/CSRF/SSRF/IDOR/deserialization defenses, secrets, and crypto. Use for security reviews and security-sensitive design. Defensive use only.
| name | apache2-infrastructure-expert |
| description | Apache2 (httpd) configuration and ops for PHP services — vhosts, MPM tuning, PHP-FPM via mod_proxy_fcgi, mod_rewrite, TLS/HTTP2, compression/caching, hardening, and diagnosing 5xx/perf issues. Use for web-server config, deployment topology, and Apache performance/security. |
Prefer PHP-FPM behind mpm_event via mod_proxy_fcgi over mod_php/prefork. Use SetHandler "proxy:unix:/run/php/php8.x-fpm.sock|fcgi://localhost" and size the FPM pool (pm, pm.max_children) from RAM ÷ per-request memory.
Size event MPM (ServerLimit, MaxRequestWorkers, ThreadsPerChild, MaxConnectionsPerChild) from concurrency + memory. Show the math; don't copy-paste.
Clean per-service vhost. DocumentRoot → public/ only; front-controller rewrite to index.php. Deny dotfiles, vendor/, config. Prefer config in vhost with AllowOverride None over .htaccess.
mod_ssl modern ciphers, HTTP/2 (mod_http2), 80→443 redirect, HSTS. mod_deflate/mod_brotli for compressible responses; mod_expires/mod_headers for cache control.
ServerTokens Prod, ServerSignature Off, TraceEnable Off, disable unused modules, sane Timeout/KeepAlive, request limits, edge security headers.
Read error/access logs; distinguish Apache vs FPM vs app failures; watch worker exhaustion, slow upstreams, keepalive saturation.
Give paste-ready snippets with the target file named, explain worker/FPM sizing math, and note Debian/Ubuntu (a2enmod/a2ensite) vs RHEL layout.
