fix .gitignore dir negation so config/ and scripts/ are tracked

config/php/95-bitrix.ini

@@ -0,0 +1,26 @@
+; Bitrix runtime overrides, shared by fpm and cli.
+memory_limit = 512M
+max_execution_time = 300
+default_socket_timeout = 60
+date.timezone = Asia/Yekaterinburg
+expose_php = Off
+
+realpath_cache_size = 4096K
+realpath_cache_ttl = 3600
+
+upload_max_filesize = 100M
+post_max_size = 120M
+max_file_uploads = 50
+
+[opcache]
+opcache.enable              = 1
+opcache.enable_cli          = 1
+opcache.memory_consumption  = 256
+opcache.interned_strings_buffer = 16
+opcache.max_accelerated_files = 24000
+opcache.validate_timestamps = 1
+opcache.revalidate_freq     = 60
+
+[apcu]
+apc.enabled  = 1
+apc.shm_size = 64M

config/php/fpm-pool-bitrix.conf

@@ -0,0 +1,27 @@
+; php-fpm pool for Bitrix (native, no docker)
+[bitrix]
+user = bitrix
+group = bitrix
+listen = /run/php/bitrix-fpm.sock
+listen.owner = root
+listen.group = www-data
+listen.mode = 0660
+
+pm = dynamic
+pm.max_children = __MAX_CHILDREN__      ; ~150MB each: RAM - mysql(~5G) - memcached(1.2G) - crowdsec(0.4G)
+pm.start_servers = 5
+pm.min_spare_servers = 5
+pm.max_spare_servers = 15               ; workers die under low load -> memory stays bounded
+pm.max_requests = 500                   ; recycle worker after 500 requests (leak guard)
+
+request_terminate_timeout = 300s
+slowlog = /var/log/php/bitrix-slow.log
+request_slowlog_timeout = 5s
+catch_workers_output = yes
+
+php_admin_value[error_log]       = /var/log/php/bitrix-error.log
+php_admin_flag[log_errors]       = on
+php_admin_value[memory_limit]    = 512M
+
+env[HOSTNAME] = $HOSTNAME
+env[TMPDIR]   = /tmp/php/upload