Production Web server: Lighttpd - Revision history

Gstrauss: simplify TLS config; prefer modern lighttpd TLS defaults

2023-11-02T03:22:27Z

simplify TLS config; prefer modern lighttpd TLS defaults

← Older revision		Revision as of 03:22, 2 November 2023
Line 179:		Line 179:
	server.modules += ("mod_openssl")		server.modules += ("mod_openssl")
	\$SERVER["socket"] == "0.0.0.0:443" {		\$SERVER["socket"] == "0.0.0.0:443" {
	ssl.engine = "enable"		ssl.engine = "enable"
	ssl.pemfile = "/etc/ssl/certs/$(hostname -d).pem"		ssl.pemfile = "/etc/ssl/certs/$(hostname -d).pem"
	~~ssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM"~~
	~~ssl.honor-cipher-order = "enable~~"
	}		}
	\$HTTP["scheme"] == "http" {		\$HTTP["scheme"] == "http" {

Sertonix: use https link

2023-08-25T02:09:37Z

use https link

← Older revision		Revision as of 02:09, 25 August 2023
Line 1:		Line 1:

	[~~http~~://www.lighttpd.net/ lighttpd] is a simple, standards-compliant, secure, and flexible web server.		[https://www.lighttpd.net/ lighttpd] is a simple, standards-compliant, secure, and flexible web server.

	== Lighttpd Installation ==		== Lighttpd Installation ==

Tech3599: /* Technical */ Removed dead link

2023-03-24T05:37:00Z

Technical: Removed dead link

← Older revision		Revision as of 05:37, 24 March 2023
Line 247:		Line 247:

	* [[Production LAMP system: Lighttpd + PHP + MySQL]]		* [[Production LAMP system: Lighttpd + PHP + MySQL]]
	* [[Alpine newbie developer]]

	[[Category:Newbie]]		[[Category:Newbie]]

Psykose: unlink deleted article

2023-03-01T14:15:30Z

unlink deleted article

← Older revision		Revision as of 14:15, 1 March 2023
Line 243:		Line 243:

	* LAMP deploy of the Web Server with PHP, user html_dir and MariaDB: [[Production LAMP system: Lighttpd + PHP + MySQL]]		* LAMP deploy of the Web Server with PHP, user html_dir and MariaDB: [[Production LAMP system: Lighttpd + PHP + MySQL]]
	* LAMP deploy of the Web Server with PHP 5.6 and MariaDB: [[Production LAMP system: Lighttpd + PHP5 + MySQL]]

	= See Also =		= See Also =

Gstrauss: Undo revision 22799 by Gstrauss (talk) backslases needed in shell command

2022-12-22T17:55:57Z

Undo revision 22799 by Gstrauss (talk) backslases needed in shell command

← Older revision		Revision as of 17:55, 22 December 2022
Line 178:		Line 178:
	cat > /etc/lighttpd/mod_ssl.conf << EOF		cat > /etc/lighttpd/mod_ssl.conf << EOF
	server.modules += ("mod_openssl")		server.modules += ("mod_openssl")
	$SERVER["socket"] == "0.0.0.0:443" {		\$SERVER["socket"] == "0.0.0.0:443" {
	ssl.engine = "enable"		ssl.engine = "enable"
	ssl.pemfile = "/etc/ssl/certs/$(hostname -d).pem"		ssl.pemfile = "/etc/ssl/certs/$(hostname -d).pem"
Line 184:		Line 184:
	ssl.honor-cipher-order = "enable"		ssl.honor-cipher-order = "enable"
	}		}
	$HTTP["scheme"] == "http" {		\$HTTP["scheme"] == "http" {
	url.redirect = ("" => "https://${url.authority}${url.path}${qsa}")		url.redirect = ("" => "https://\${url.authority}\${url.path}\${qsa}")
	url.redirect-code = 308		url.redirect-code = 308
	}		}

Gstrauss: /* SSL : making self signed certificate */ remove excess backslashes

2022-12-22T17:54:41Z

SSL : making self signed certificate: remove excess backslashes

← Older revision		Revision as of 17:54, 22 December 2022
Line 178:		Line 178:
	cat > /etc/lighttpd/mod_ssl.conf << EOF		cat > /etc/lighttpd/mod_ssl.conf << EOF
	server.modules += ("mod_openssl")		server.modules += ("mod_openssl")
	\$SERVER["socket"] == "0.0.0.0:443" {		$SERVER["socket"] == "0.0.0.0:443" {
	ssl.engine = "enable"		ssl.engine = "enable"
	ssl.pemfile = "/etc/ssl/certs/$(hostname -d).pem"		ssl.pemfile = "/etc/ssl/certs/$(hostname -d).pem"
Line 184:		Line 184:
	ssl.honor-cipher-order = "enable"		ssl.honor-cipher-order = "enable"
	}		}
	\$HTTP["scheme"] == "http" {		$HTTP["scheme"] == "http" {
	url.redirect = ("" => "https://\${url.authority}\${url.path}\${qsa}")		url.redirect = ("" => "https://${url.authority}${url.path}${qsa}")
	url.redirect-code = 308		url.redirect-code = 308
	}		}

Gstrauss: modernize

2022-12-22T17:53:25Z

modernize

Show changes

Silvernail at 12:11, 19 October 2022

2022-10-19T12:11:12Z

← Older revision		Revision as of 12:11, 19 October 2022
Line 4:		Line 4:
	== Lighttpd Installation ==		== Lighttpd Installation ==

	~~Production~~ environment ~~only~~ will handle ~~need~~ packages.. so no doc or manages allowed~~, Since~~ kernel version 2.6, Linux ~~has~~ sys_epoll, a so-called edge-triggered polling mechanism ~~which~~ scales linearly with the number of connections. ~~Due~~ lighttpd ~~runs~~ over Alpine Linux ~~only the mechanish~~ we will ~~use are only~~ the "linux-sysepoll".		This production environment will handle only the necessary packages... so no doc or manages allowed. As of kernel version 2.6, Linux utilizes sys_epoll, which is a so-called edge-triggered polling mechanism that scales linearly with the number of connections. Since lighttpd will be running over Alpine Linux, we will be using the "linux-sysepoll" mechanism.

	Lighttpd attempts to improve performance further by caching the output of the UNIX stat() command. It includes a basic (“simple”) cache which keeps the result of file system calls in memory for one second. ~~But many~~ Linux distributions include more advanced accelerators: FAM was the original~~, and~~ a lighter-weight workalike called Gamin is now ~~included~~ by default ~~in Ubuntu’s lighttpd install~~.		Lighttpd attempts to improve performance further by caching the output of the UNIX stat() command. It includes a basic (“simple”) cache which keeps the result of file system calls in memory for one second. Other Linux distributions include more advanced accelerators, but FAM was the original. Since then a lighter-weight, workalike called Gamin was developed and is now installed by default.

	# run apk for ~~need pacakges~~		# run apk for necessary packages
	# make the htdos public web root directories		# make the htdos public web root directories
	# change default port to production one, http ~~are used with~~ 80		# change the default port to a production one, http uses port 80
	# use FAM ~~stule~~ (gamin) file alteration monitor, increases performance (OPTIONAL ~~currentluy~~ there's no FAM/GAMIN package)		# use FAM style (gamin) file alteration monitor, increases performance (OPTIONAL currently there is no FAM/GAMIN package)
	# use linux event handler, increases performance due Alpine are linux only		# use linux event handler, increases performance due Alpine are linux only
	# added the servide to the default runlevel, not to boot, because need networking activated		# added the servide to the default runlevel, not to boot, because need networking activated

Zcrayfish: /* See Also */ Removed wikilinks to non-existent articles.

2021-12-14T19:33:32Z

See Also: Removed wikilinks to non-existent articles.

← Older revision		Revision as of 19:33, 14 December 2021
Line 283:		Line 283:

	* [[Production LAMP system: Lighttpd + PHP + MySQL]]		* [[Production LAMP system: Lighttpd + PHP + MySQL]]
	* [[Production Lets Encrypt: dehydrated]]
	* [[Alpine newbie developer]]		* [[Alpine newbie developer]]
	* [[Alpine newbie lammers]]

	[[Category:Newbie]]		[[Category:Newbie]]

Mckaygerhard: /* Lighttpd Installation */ FAM/GAMIN NOTES

2020-11-04T15:20:12Z

Lighttpd Installation: FAM/GAMIN NOTES

← Older revision		Revision as of 15:20, 4 November 2020
Line 11:		Line 11:
	# make the htdos public web root directories		# make the htdos public web root directories
	# change default port to production one, http are used with 80		# change default port to production one, http are used with 80
	# use FAM stule (gamin) file alteration monitor, increases performance		# use FAM stule (gamin) file alteration monitor, increases performance (OPTIONAL currentluy there's no FAM/GAMIN package)
	# use linux event handler, increases performance due Alpine are linux only		# use linux event handler, increases performance due Alpine are linux only
	# added the servide to the default runlevel, not to boot, because need networking activated		# added the servide to the default runlevel, not to boot, because need networking activated
Line 23:		Line 23:

	sed -i -r 's#\#.server.port.=.*#server.port = 80#g' /etc/lighttpd/lighttpd.conf		sed -i -r 's#\#.server.port.=.*#server.port = 80#g' /etc/lighttpd/lighttpd.conf

	~~sed -i -r 's#.server.stat-cache-engine.=.*# server.stat-cache-engine = "fam"#g' /etc/lighttpd/lighttpd.conf~~

	sed -i -r 's#\#.server.event-handler = "linux-sysepoll".#server.event-handler = "linux-sysepoll"#g' /etc/lighttpd/lighttpd.conf		sed -i -r 's#\#.server.event-handler = "linux-sysepoll".#server.event-handler = "linux-sysepoll"#g' /etc/lighttpd/lighttpd.conf
Line 47:		Line 45:

	'''There's a problem in Alpine linux, FAM (gamin) are activated as a lighttpd only service''', that's make sense in dockers but in servers could be a problem if FAM (gamin) are also need for others services at the same time.		'''There's a problem in Alpine linux, FAM (gamin) are activated as a lighttpd only service''', that's make sense in dockers but in servers could be a problem if FAM (gamin) are also need for others services at the same time.

			'''OPTIONAL:''' '''alpine packagers are a mess, removed fam on recents''', so older releases of alpine can use compiled fam packages with <code>sed -i -r 's#.server.stat-cache-engine.=.*# server.stat-cache-engine = "fam"#g' /etc/lighttpd/lighttpd.conf</code>

	=== Controlling Lighttpd ===		=== Controlling Lighttpd ===