Lighttpd

Resources

lighttpd is [[Article description::a fast and lightweight web server.]]

Installation

USE flags

USE flags for www-servers/lighttpd Lightweight high-performance web server

`brotli`	Enable output compression via Brotli (recommended)
`bzip2`	Enable output compression via bzip2
`dbi`	Enable dev-db/libdbi (database-independent abstraction layer) support
`doc`	Add extra documentation (API, Javadoc, etc). It is recommended to enable per package instead of globally
`gdbm`	Add support for sys-libs/gdbm (GNU database libraries)
`gnutls`	Build module for TLS via GnuTLS
`ipv6`	Add support for IP version 6
`kerberos`	Add kerberos support
`ldap`	Add LDAP support (Lightweight Directory Access Protocol)
`libev`	Enable fdevent handler
`lua`	Enable Lua scripting support
`maxminddb`	Add support for geolocation using libMaxMindDB
`mbedtls`	Build module for TLS via Mbed TLS
`memcached`	Add support for memcached
`minimal`	Install a very minimal build (disables, for example, plugins, fonts, most drivers, non-critical features)
`mmap`	Use mmap with files owned by lighttpd. This is a dangerous option as it may allow local users to trigger SIGBUS crashes.
`mysql`	Add mySQL Database support
`nss`	Build module for TLS via Mozilla's Network Security Services
`pcre`	Add support for Perl Compatible Regular Expressions
`php`	Include support for the PHP language
`postgres`	Add support for the postgresql database
`rrdtool`	Enable rrdtool support via mod_rrdtool
`sasl`	Add support for the Simple Authentication and Security Layer
`selinux`	!!internal use only!! Security Enhanced Linux support, this must be set by the selinux profile or breakage will occur
`sqlite`	Add support for sqliteembedded sql database
`ssl`	Add support for SSL/TLS connections (Secure Socket Layer / Transport Layer Security)
`test`	Enable dependencies and/or preparations necessary to run tests (usually controlled by FEATURES=test but can be toggled independently)
`webdav`	Enable webdav properties
`xattr`	Add support for extended attributes (filesystem-stored metadata)
`zlib`	Enable output compression via gzip or deflate algorithms

Data provided by the Gentoo Package Database · Last update: 2021-03-16 16:42 More information about USE flags

Emerge

Install www-servers/lighttpd:

root #emerge --ask www-servers/lighttpd

Configuration

The lighttpd configuration is handled by /etc/lighttpd/lighttpd.conf. The first example shows a single-site access, with SSL and no dynamic capabilities (such as PHP).

FILE /etc/lighttpd/lighttpd.confExample 1

<syntaxhighlight lang="ini">$SERVER["socket"] == "192.0.2.10:443" {
  server.name = "www.genfic.com"
  server.document-root = "/var/www/www.genfic.com/"
  server.errorlog = "/var/log/lighttpd/http_error.log"
  accesslog.filename = "/var/log/lighttpd/http_access.log"
  ## SSL Configuration
  ssl.engine = "enable"
  ssl.pemfile = "/etc/ssl/lighttpd-ssl.pem"
  ssl.ca-file = "/etc/ssl/certs/ca-certificate.crt"
  # SSL options
  ssl.use-sslv2 = "disable"
  ssl.cipher-list = "TLSv1+HIGH !SSLv2 RC4+MEDIUM !aNULL !eNULL !3DES @STRENGTH"
}</syntaxhighlight>

To enable additional functionalities configure needed modules in /etc/lighttpd/lighttpd.conf. For instance, to enable PHP using the FastCGI processor:

FILE /etc/lighttpd/lighttpd.confExample 2 - Enabling PHP support

<syntaxhighlight lang="apache">...
include "mod_fastcgi.conf"
...</syntaxhighlight>

IP access lists

This third example shows how to allow access to a particular site /server-status only to certain IP addresses. To allow using service status on the 198.51.100.1 and 127.0.0.1 addresses, set the following lines in the lighttpd.conf file:

FILE /etc/lighttpd/lighttpd.confExample 3 - Enabling and configuring an IP access lists for /server-status page

<syntaxhighlight lang="apache"># enable access module
server.modules = {
  ...
  "mod_access",
}
...
# enable server-status page globally
status.status-url  = "/server-status"

...
# restrict access to server-status to listed IP hosts
$HTTP["remoteip"] !~ "198.51.100.1|127.0.0.1" {
      url.access-deny = ( "/server-status" )
}</syntaxhighlight>

Start up

In order for the lighttpd service to start automatically it must be properly added to the init handler program. Gentoo has two main init handler programs: OpenRC and Systemd.

OpenRC

With OpenRC use the rc-update command:

root #rc-update add lighttpd default

systemd

With systemd use the systemctl command:

root #systemctl enable lighttpd.service

Troubleshooting

Verifying /etc/lighttpd/lighttpd.conf configuration file with lighttpd-angel, it will return the exit code 0, if everything is configured properly:

root #lighttpd-angel -t -f /etc/lighttpd/lighttpd.conf

Syntax OK
lighttpd-angel.c.140: child (pid=32491) exited normally with exitcode: 0

If the configuration file has errors, it will print it to stdout, like in the example below: