PHP-FPM unix socket permissions for Nextcloud 21

Hi, I am having troubles with the user/group changes coming with nextcloud 21. Since nextcloud is now running as the ‘nextcloud’ user, that means that also the php-fpm unix socket is created owned by nextcloud:nextcloud. However this way they can’t be accessed by apache running as ‘http’. What’s the recommended fix? Have the domain socket be created as nextcloud:http? Add http to the nextcloud group? Am I missing something?