class website::php(
    $suffix = '',
    $opcache = undef,
    ) {
  $packages = [ "php${suffix}", "php${suffix}-mcrypt", "php${suffix}-mbstring", "php${suffix}-xml", "php${suffix}-gd" ]
  package { $packages:
    ensure => latest,
    notify => Service['httpd']
  }
  ->
  file { '/etc/php.d/custom-lockdown.ini':
    ensure => present,
    content => 'allow_url_fopen = \'off\'',
  }

  if $opcache {
    package { "php${suffix}-${opcache}":
      ensure => latest,
      notify => Service['httpd'],
    }
    file { '/etc/php.d/opcache.ini':
      ensure => present,
      content => 'zend_extension=/usr/lib64/php/modules/opcache.so',
    }
  }
}