SELinux for Apache and PHP-FPM

dnf install -y httpd php php-fpm
systemctl enable --now httpd php-fpm

listen = 127.0.0.1:9000

<FilesMatch \.(php|phar)$>
    SetHandler "proxy:fcgi://127.0.0.1:9000"
</FilesMatch>

echo '<?php phpinfo();' > /var/www/html/index.php

curl http://localhost/index.php
# 503 Service Unavailable

avc: denied { name_connect } for comm="httpd"
scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:object_r:http_port_t:s0
tclass=tcp_socket

grep AVC /var/log/audit/audit.log | grep 9000 | audit2allow

#!!!! This avc can be allowed using one of these booleans:
#     httpd_can_network_connect, httpd_graceful_shutdown
allow httpd_t http_port_t:tcp_socket name_connect;

setsebool -P httpd_can_network_connect on

curl http://localhost/index.php
# PHP info page renders