etc/lighttpd/lighttpd.conf

   1 server.modules              = ( "mod_rewrite", "mod_alias", "mod_access", "mod_auth", "mod_proxy_core", "mod_proxy_backend_fastcgi", "mod_redirect", "mod_magnet", "mod_accesslog" )
   2 server.errorlog             = "/var/log/lighttpd/error_log"
   3 #$HTTP["useragent"] !~ "^check_http" {
   4 #    accesslog.filename          = "/var/log/lighttpd/access_log"
   5 #}
   6 etag.use-inode              = "disable"
   7 index-file.names            = ( "index.php", "index.html" )
   8 url.access-deny             = ( "~", ".inc", ".svn", "CVS" )
   9 static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
  10 server.port                 = 80
  11 server.pid-file             = "/var/run/lighttpd.pid"
  12 server.username             = "lighttpd"
  13 server.groupname            = "apache"
  14
  15 $PHYSICAL["existing-path"] =~ "\.php$" {
  16     proxy-core.balancer = "round-robin"
  17     proxy-core.allow-x-sendfile = "enable"
  18     proxy-core.protocol = "fastcgi"
  19     proxy-core.backends = ( "unix:/tmp/php.sock" )
  20     proxy-core.max-pool-size = 4
  21 }
  22
  23 server.document-root = "/srv/web/home/"
  24 alias.url = ( "/~sql" => "/srv/web" )
  25 alias.url += ( "/main" => "/srv/web/main" )
  26 alias.url += ( "/dev" => "/srv/web/dev" )
  27 alias.url += ( "/tools" => "/srv/web/tools" )
  28 #alias.url += ( "/" => "/srv/web/home" )
  29 url.rewrite-once = ( "^/tools/([^\?]+)(\??.*)" => "/tools/$1.php$2" )
  30 url.rewrite-once += ( "^/~sql/main/do/([^\?]+)(\??.*)" => "/~sql/main/$1.php$2" )
  31 url.rewrite-once += ( "^/~sql/dev/do/([^\?]+)(\??.*)" => "/~sql/dev/$1.php$2" )
  32 url.rewrite-once += ( "^/main/do/([^\?]+)(\??.*)" => "/main/$1.php$2" )
  33 url.rewrite-once += ( "^/dev/do/([^\?]+)(\??.*)" => "/dev/$1.php$2" )
  34 url.redirect = ( "^/phpMyAdmin(.*)" => "http://scripts.mit.edu/~sql/phpMyAdmin$1" )
  35
  36 ssl.verifyclient.username  = "SSL_CLIENT_S_DN_emailAddress"
  37 $SERVER["socket"] == "0.0.0.0:443" {
  38 #    server.document-root = "/srv/www/root/"
  39     ssl.engine = "enable"
  40     ssl.pemfile = "/etc/lighttpd/sql.mit.edu.pem"
  41     ssl.ca-file = "/etc/lighttpd/mitCAclient.pem"
  42     ssl.verifyclient.activate   = "enable"
  43     ssl.verifyclient.enforce    = "disable"
  44     ssl.verifyclient.depth      = 2
  45
  46 #    url.redirect += ( "^/$" => "/manage/" )
  47     $HTTP["url"] =~ "^/manage(/|$)" {
  48         proxy-core.balancer = "round-robin"
  49         proxy-core.protocol = "fastcgi"
  50         proxy-core.backends = ( "unix:/srv/var/run/interface.sock" )
  51         proxy-core.max-pool-size = 4
  52         proxy-core.rewrite-request = (
  53             "_pathinfo" => ( "^/manage(/.*)" => "$1" ),
  54             "_scriptname" => ( "^(/manage/)" => "$1" )
  55         )
  56     }
  57 }
  58
  59 mimetype.assign = (
  60     ".gz"           =>      "application/x-gzip",
  61     ".tar.gz"       =>      "application/x-tgz",
  62     ".tgz"          =>      "application/x-tgz",
  63     ".tar"          =>      "application/x-tar",
  64     ".gif"          =>      "image/gif",
  65     ".jpg"          =>      "image/jpeg",
  66     ".jpeg"         =>      "image/jpeg",
  67     ".png"          =>      "image/png",
  68     ".css"          =>      "text/css",
  69     ".html"         =>      "text/html",
  70     ".htm"          =>      "text/html",
  71     ".js"           =>      "text/javascript",
  72     ".asc"          =>      "text/plain",
  73     ".c"            =>      "text/plain",
  74     ".cpp"          =>      "text/plain",
  75     ".log"          =>      "text/plain",
  76     ".conf"         =>      "text/plain",
  77     ".text"         =>      "text/plain",
  78     ".txt"          =>      "text/plain",
  79     ".dtd"          =>      "text/xml",
  80     ".xml"          =>      "text/xml",
  81     ".bz2"          =>      "application/x-bzip",
  82     ".tbz"          =>      "application/x-bzip-compressed-tar",
  83     ".tar.bz2"      =>      "application/x-bzip-compressed-tar"
  84 )