diff --git a/CHANGELOG.md b/CHANGELOG.md
index 20bbf06e..bbb1e7b3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -80,6 +80,7 @@ The **patch** part changes incrementally at each release.
 * php: Make sure the default pool we define can be fully functionnal witout debian's default pool file
 * php: Change the default pool names to something more explicit (and same for the variables names)
 * php: Add a task to remove Debian's default FPM pool file (off by default)
+* php: Cleanup CLI Settings. Also, allow url fopen and don't disable functions (in CLI only)
 * postgresql : changed logrotate config to 10 days (and fixed permissions)
 * rbenv: changed default Ruby version to 2.7.0
 * squid: Remove wait time when we turn off squid
diff --git a/php/tasks/config_cli.yml b/php/tasks/config_cli.yml
index 24c70caa..23ed695c 100644
--- a/php/tasks/config_cli.yml
+++ b/php/tasks/config_cli.yml
@@ -8,21 +8,11 @@
     mode: "0644"
     create: yes
   with_items:
-    - { option: "short_open_tag", value: "Off" }
-    - { option: "expose_php", value: "Off" }
-    - { option: "display_errors", value: "Off" }
-    - { option: "log_errors", value: "On" }
-    - { option: "html_errors", value: "Off" }
-    - { option: "allow_url_fopen", value: "Off" }
+    - { option: "display_errors", value: "On" }
+    - { option: "allow_url_fopen", value: "On" }
+    - { option: "disable_functions", value: "" }
 
-- name: "Disable PHP functions for CLI"
-  ini_file:
-    dest: "{{ php_cli_defaults_ini_file }}"
-    section: PHP
-    option: disable_functions
-    value: "exec,shell-exec,system,passthru,putenv,popen"
-
-- name: Custom php.ini for CLI (jessie)
+- name: Custom php.ini for CLI
   copy:
     dest: "{{ php_cli_custom_ini_file }}"
     content: |