refactor lighttpd
Package lighttpd-config is added to config customized config file of lighttpd. lighttpd-csr.conf is removed, since it is not used in build. Patches in files folder are moved to patches folder. Test: Pass build and multi node deploy test. Confirmed related config file is the same as before in deploy. Story: 2003768 Task: 27616 Depends-On: https://review.openstack.org/617221 Change-Id: I9155542754985429f06fa569f3644009a39ab8c1 Signed-off-by: slin14 <shuicheng.lin@intel.com>
This commit is contained in:
parent
f080443b6b
commit
cb13405b65
2
lighttpd-config/centos/build_srpm.data
Normal file
2
lighttpd-config/centos/build_srpm.data
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
SRC_DIR="files"
|
||||||
|
TIS_PATCH_VER=0
|
64
lighttpd-config/centos/lighttpd-config.spec
Normal file
64
lighttpd-config/centos/lighttpd-config.spec
Normal file
@ -0,0 +1,64 @@
|
|||||||
|
Summary: StarlingX lighttpd Configuration File
|
||||||
|
Name: lighttpd-config
|
||||||
|
Version: 1.0
|
||||||
|
Release: %{tis_patch_ver}%{?_tis_dist}
|
||||||
|
License: Apache-2.0
|
||||||
|
Group: config-files
|
||||||
|
Packager: StarlingX
|
||||||
|
URL: unknown
|
||||||
|
Source: %name-%version.tar.gz
|
||||||
|
|
||||||
|
BuildArch: noarch
|
||||||
|
Requires: lighttpd
|
||||||
|
|
||||||
|
%define debug_package %{nil}
|
||||||
|
|
||||||
|
%description
|
||||||
|
StarlingX lighttpd configuration file
|
||||||
|
|
||||||
|
%prep
|
||||||
|
|
||||||
|
%setup
|
||||||
|
|
||||||
|
%build
|
||||||
|
|
||||||
|
%install
|
||||||
|
|
||||||
|
CONFDIR=%{buildroot}%{_sysconfdir}/lighttpd
|
||||||
|
ROOTDIR=%{buildroot}/www
|
||||||
|
|
||||||
|
install -d -m 1777 ${ROOTDIR}/tmp
|
||||||
|
install -d ${CONFDIR}/ssl
|
||||||
|
install -d ${ROOTDIR}/pages/dav
|
||||||
|
install -d %{buildroot}%{_datadir}/starlingx
|
||||||
|
install -m640 lighttpd.conf %{buildroot}%{_datadir}/starlingx/lighttpd.conf
|
||||||
|
install -m755 lighttpd.init %{buildroot}%{_datadir}/starlingx/lighttpd.init
|
||||||
|
install -m644 lighttpd-inc.conf ${CONFDIR}/lighttpd-inc.conf
|
||||||
|
install -m644 index.html.lighttpd ${ROOTDIR}/pages/index.html
|
||||||
|
|
||||||
|
install -d %{buildroot}%{_sysconfdir}/logrotate.d
|
||||||
|
install -m644 lighttpd.logrotate %{buildroot}%{_datadir}/starlingx/lighttpd.logrotate
|
||||||
|
|
||||||
|
chmod 02770 %{buildroot}%{_sysconfdir}/lighttpd
|
||||||
|
|
||||||
|
%post
|
||||||
|
if [ $1 -eq 1 ] ; then
|
||||||
|
cp -f %{_datadir}/starlingx/lighttpd.conf %{_sysconfdir}/lighttpd/lighttpd.conf
|
||||||
|
chmod 640 %{_sysconfdir}/lighttpd/lighttpd.conf
|
||||||
|
cp -f %{_datadir}/starlingx/lighttpd.init %{_sysconfdir}/rc.d/init.d/lighttpd
|
||||||
|
chmod 755 %{_sysconfdir}/rc.d/init.d/lighttpd
|
||||||
|
cp -f %{_datadir}/starlingx/lighttpd.logrotate %{_sysconfdir}/logrotate.d/lighttpd
|
||||||
|
chmod 644 %{_sysconfdir}/logrotate.d/lighttpd
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
%files
|
||||||
|
%defattr(-,root,root)
|
||||||
|
%license LICENSE
|
||||||
|
%{_datadir}/starlingx/lighttpd.conf
|
||||||
|
%{_datadir}/starlingx/lighttpd.logrotate
|
||||||
|
%{_datadir}/starlingx/lighttpd.init
|
||||||
|
%dir /www/pages/
|
||||||
|
/www/pages/*
|
||||||
|
%config(noreplace) %{_sysconfdir}/lighttpd/lighttpd-inc.conf
|
||||||
|
/www/pages/index.html
|
202
lighttpd-config/files/LICENSE
Normal file
202
lighttpd-config/files/LICENSE
Normal file
@ -0,0 +1,202 @@
|
|||||||
|
|
||||||
|
Apache License
|
||||||
|
Version 2.0, January 2004
|
||||||
|
http://www.apache.org/licenses/
|
||||||
|
|
||||||
|
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||||
|
|
||||||
|
1. Definitions.
|
||||||
|
|
||||||
|
"License" shall mean the terms and conditions for use, reproduction,
|
||||||
|
and distribution as defined by Sections 1 through 9 of this document.
|
||||||
|
|
||||||
|
"Licensor" shall mean the copyright owner or entity authorized by
|
||||||
|
the copyright owner that is granting the License.
|
||||||
|
|
||||||
|
"Legal Entity" shall mean the union of the acting entity and all
|
||||||
|
other entities that control, are controlled by, or are under common
|
||||||
|
control with that entity. For the purposes of this definition,
|
||||||
|
"control" means (i) the power, direct or indirect, to cause the
|
||||||
|
direction or management of such entity, whether by contract or
|
||||||
|
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||||
|
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||||
|
|
||||||
|
"You" (or "Your") shall mean an individual or Legal Entity
|
||||||
|
exercising permissions granted by this License.
|
||||||
|
|
||||||
|
"Source" form shall mean the preferred form for making modifications,
|
||||||
|
including but not limited to software source code, documentation
|
||||||
|
source, and configuration files.
|
||||||
|
|
||||||
|
"Object" form shall mean any form resulting from mechanical
|
||||||
|
transformation or translation of a Source form, including but
|
||||||
|
not limited to compiled object code, generated documentation,
|
||||||
|
and conversions to other media types.
|
||||||
|
|
||||||
|
"Work" shall mean the work of authorship, whether in Source or
|
||||||
|
Object form, made available under the License, as indicated by a
|
||||||
|
copyright notice that is included in or attached to the work
|
||||||
|
(an example is provided in the Appendix below).
|
||||||
|
|
||||||
|
"Derivative Works" shall mean any work, whether in Source or Object
|
||||||
|
form, that is based on (or derived from) the Work and for which the
|
||||||
|
editorial revisions, annotations, elaborations, or other modifications
|
||||||
|
represent, as a whole, an original work of authorship. For the purposes
|
||||||
|
of this License, Derivative Works shall not include works that remain
|
||||||
|
separable from, or merely link (or bind by name) to the interfaces of,
|
||||||
|
the Work and Derivative Works thereof.
|
||||||
|
|
||||||
|
"Contribution" shall mean any work of authorship, including
|
||||||
|
the original version of the Work and any modifications or additions
|
||||||
|
to that Work or Derivative Works thereof, that is intentionally
|
||||||
|
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||||
|
or by an individual or Legal Entity authorized to submit on behalf of
|
||||||
|
the copyright owner. For the purposes of this definition, "submitted"
|
||||||
|
means any form of electronic, verbal, or written communication sent
|
||||||
|
to the Licensor or its representatives, including but not limited to
|
||||||
|
communication on electronic mailing lists, source code control systems,
|
||||||
|
and issue tracking systems that are managed by, or on behalf of, the
|
||||||
|
Licensor for the purpose of discussing and improving the Work, but
|
||||||
|
excluding communication that is conspicuously marked or otherwise
|
||||||
|
designated in writing by the copyright owner as "Not a Contribution."
|
||||||
|
|
||||||
|
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||||
|
on behalf of whom a Contribution has been received by Licensor and
|
||||||
|
subsequently incorporated within the Work.
|
||||||
|
|
||||||
|
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
copyright license to reproduce, prepare Derivative Works of,
|
||||||
|
publicly display, publicly perform, sublicense, and distribute the
|
||||||
|
Work and such Derivative Works in Source or Object form.
|
||||||
|
|
||||||
|
3. Grant of Patent License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
(except as stated in this section) patent license to make, have made,
|
||||||
|
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||||
|
where such license applies only to those patent claims licensable
|
||||||
|
by such Contributor that are necessarily infringed by their
|
||||||
|
Contribution(s) alone or by combination of their Contribution(s)
|
||||||
|
with the Work to which such Contribution(s) was submitted. If You
|
||||||
|
institute patent litigation against any entity (including a
|
||||||
|
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||||
|
or a Contribution incorporated within the Work constitutes direct
|
||||||
|
or contributory patent infringement, then any patent licenses
|
||||||
|
granted to You under this License for that Work shall terminate
|
||||||
|
as of the date such litigation is filed.
|
||||||
|
|
||||||
|
4. Redistribution. You may reproduce and distribute copies of the
|
||||||
|
Work or Derivative Works thereof in any medium, with or without
|
||||||
|
modifications, and in Source or Object form, provided that You
|
||||||
|
meet the following conditions:
|
||||||
|
|
||||||
|
(a) You must give any other recipients of the Work or
|
||||||
|
Derivative Works a copy of this License; and
|
||||||
|
|
||||||
|
(b) You must cause any modified files to carry prominent notices
|
||||||
|
stating that You changed the files; and
|
||||||
|
|
||||||
|
(c) You must retain, in the Source form of any Derivative Works
|
||||||
|
that You distribute, all copyright, patent, trademark, and
|
||||||
|
attribution notices from the Source form of the Work,
|
||||||
|
excluding those notices that do not pertain to any part of
|
||||||
|
the Derivative Works; and
|
||||||
|
|
||||||
|
(d) If the Work includes a "NOTICE" text file as part of its
|
||||||
|
distribution, then any Derivative Works that You distribute must
|
||||||
|
include a readable copy of the attribution notices contained
|
||||||
|
within such NOTICE file, excluding those notices that do not
|
||||||
|
pertain to any part of the Derivative Works, in at least one
|
||||||
|
of the following places: within a NOTICE text file distributed
|
||||||
|
as part of the Derivative Works; within the Source form or
|
||||||
|
documentation, if provided along with the Derivative Works; or,
|
||||||
|
within a display generated by the Derivative Works, if and
|
||||||
|
wherever such third-party notices normally appear. The contents
|
||||||
|
of the NOTICE file are for informational purposes only and
|
||||||
|
do not modify the License. You may add Your own attribution
|
||||||
|
notices within Derivative Works that You distribute, alongside
|
||||||
|
or as an addendum to the NOTICE text from the Work, provided
|
||||||
|
that such additional attribution notices cannot be construed
|
||||||
|
as modifying the License.
|
||||||
|
|
||||||
|
You may add Your own copyright statement to Your modifications and
|
||||||
|
may provide additional or different license terms and conditions
|
||||||
|
for use, reproduction, or distribution of Your modifications, or
|
||||||
|
for any such Derivative Works as a whole, provided Your use,
|
||||||
|
reproduction, and distribution of the Work otherwise complies with
|
||||||
|
the conditions stated in this License.
|
||||||
|
|
||||||
|
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||||
|
any Contribution intentionally submitted for inclusion in the Work
|
||||||
|
by You to the Licensor shall be under the terms and conditions of
|
||||||
|
this License, without any additional terms or conditions.
|
||||||
|
Notwithstanding the above, nothing herein shall supersede or modify
|
||||||
|
the terms of any separate license agreement you may have executed
|
||||||
|
with Licensor regarding such Contributions.
|
||||||
|
|
||||||
|
6. Trademarks. This License does not grant permission to use the trade
|
||||||
|
names, trademarks, service marks, or product names of the Licensor,
|
||||||
|
except as required for reasonable and customary use in describing the
|
||||||
|
origin of the Work and reproducing the content of the NOTICE file.
|
||||||
|
|
||||||
|
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||||
|
agreed to in writing, Licensor provides the Work (and each
|
||||||
|
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||||
|
implied, including, without limitation, any warranties or conditions
|
||||||
|
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||||
|
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||||
|
appropriateness of using or redistributing the Work and assume any
|
||||||
|
risks associated with Your exercise of permissions under this License.
|
||||||
|
|
||||||
|
8. Limitation of Liability. In no event and under no legal theory,
|
||||||
|
whether in tort (including negligence), contract, or otherwise,
|
||||||
|
unless required by applicable law (such as deliberate and grossly
|
||||||
|
negligent acts) or agreed to in writing, shall any Contributor be
|
||||||
|
liable to You for damages, including any direct, indirect, special,
|
||||||
|
incidental, or consequential damages of any character arising as a
|
||||||
|
result of this License or out of the use or inability to use the
|
||||||
|
Work (including but not limited to damages for loss of goodwill,
|
||||||
|
work stoppage, computer failure or malfunction, or any and all
|
||||||
|
other commercial damages or losses), even if such Contributor
|
||||||
|
has been advised of the possibility of such damages.
|
||||||
|
|
||||||
|
9. Accepting Warranty or Additional Liability. While redistributing
|
||||||
|
the Work or Derivative Works thereof, You may choose to offer,
|
||||||
|
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||||
|
or other liability obligations and/or rights consistent with this
|
||||||
|
License. However, in accepting such obligations, You may act only
|
||||||
|
on Your own behalf and on Your sole responsibility, not on behalf
|
||||||
|
of any other Contributor, and only if You agree to indemnify,
|
||||||
|
defend, and hold each Contributor harmless for any liability
|
||||||
|
incurred by, or claims asserted against, such Contributor by reason
|
||||||
|
of your accepting any such warranty or additional liability.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
APPENDIX: How to apply the Apache License to your work.
|
||||||
|
|
||||||
|
To apply the Apache License to your work, attach the following
|
||||||
|
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||||
|
replaced with your own identifying information. (Don't include
|
||||||
|
the brackets!) The text should be enclosed in the appropriate
|
||||||
|
comment syntax for the file format. We also recommend that a
|
||||||
|
file or class name and description of purpose be included on the
|
||||||
|
same "printed page" as the copyright notice for easier
|
||||||
|
identification within third-party archives.
|
||||||
|
|
||||||
|
Copyright [yyyy] [name of copyright owner]
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
1
lighttpd-config/files/index.html.lighttpd
Normal file
1
lighttpd-config/files/index.html.lighttpd
Normal file
@ -0,0 +1 @@
|
|||||||
|
<html><body><h1>Welcome to StarlingX</h1></body></html>
|
3
lighttpd-config/files/lighttpd-inc.conf
Normal file
3
lighttpd-config/files/lighttpd-inc.conf
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
# default management network access
|
||||||
|
var.management_ip_network = "127.0.0.1"
|
||||||
|
var.pxeboot_ip_network = ""
|
365
lighttpd-config/files/lighttpd.conf
Executable file
365
lighttpd-config/files/lighttpd.conf
Executable file
@ -0,0 +1,365 @@
|
|||||||
|
# lighttpd configuration file
|
||||||
|
#
|
||||||
|
# use it as a base for lighttpd 1.0.0 and above
|
||||||
|
#
|
||||||
|
# $Id: lighttpd.conf,v 1.7 2004/11/03 22:26:05 weigon Exp $
|
||||||
|
|
||||||
|
############ Options you really have to take care of ####################
|
||||||
|
|
||||||
|
## modules to load
|
||||||
|
# at least mod_access and mod_accesslog should be loaded
|
||||||
|
# all other module should only be loaded if really neccesary
|
||||||
|
# - saves some time
|
||||||
|
# - saves memory
|
||||||
|
server.modules = (
|
||||||
|
# "mod_rewrite",
|
||||||
|
# "mod_redirect",
|
||||||
|
# "mod_alias",
|
||||||
|
"mod_access",
|
||||||
|
# "mod_cml",
|
||||||
|
# "mod_trigger_b4_dl",
|
||||||
|
# "mod_auth",
|
||||||
|
# "mod_status",
|
||||||
|
# "mod_setenv",
|
||||||
|
# "mod_fastcgi",
|
||||||
|
"mod_proxy",
|
||||||
|
# "mod_simple_vhost",
|
||||||
|
# "mod_evhost",
|
||||||
|
# "mod_userdir",
|
||||||
|
# "mod_cgi",
|
||||||
|
# "mod_compress",
|
||||||
|
# "mod_ssi",
|
||||||
|
# "mod_usertrack",
|
||||||
|
# "mod_expire",
|
||||||
|
# "mod_secdownload",
|
||||||
|
# "mod_rrdtool",
|
||||||
|
# "mod_webdav",
|
||||||
|
"mod_setenv",
|
||||||
|
"mod_accesslog" )
|
||||||
|
|
||||||
|
## a static document-root, for virtual-hosting take look at the
|
||||||
|
## server.virtual-* options
|
||||||
|
server.document-root = "/www/pages/"
|
||||||
|
|
||||||
|
## where to send error-messages to
|
||||||
|
server.errorlog = "/var/log/lighttpd-error.log"
|
||||||
|
|
||||||
|
# files to check for if .../ is requested
|
||||||
|
index-file.names = ( "index.php", "index.html",
|
||||||
|
"index.htm", "default.htm" )
|
||||||
|
|
||||||
|
## set the event-handler (read the performance section in the manual)
|
||||||
|
# server.event-handler = "freebsd-kqueue" # needed on OS X
|
||||||
|
|
||||||
|
# mimetype mapping
|
||||||
|
mimetype.assign = (
|
||||||
|
".pdf" => "application/pdf",
|
||||||
|
".sig" => "application/pgp-signature",
|
||||||
|
".spl" => "application/futuresplash",
|
||||||
|
".class" => "application/octet-stream",
|
||||||
|
".ps" => "application/postscript",
|
||||||
|
".torrent" => "application/x-bittorrent",
|
||||||
|
".dvi" => "application/x-dvi",
|
||||||
|
".gz" => "application/x-gzip",
|
||||||
|
".pac" => "application/x-ns-proxy-autoconfig",
|
||||||
|
".swf" => "application/x-shockwave-flash",
|
||||||
|
".tar.gz" => "application/x-tgz",
|
||||||
|
".tgz" => "application/x-tgz",
|
||||||
|
".tar" => "application/x-tar",
|
||||||
|
".zip" => "application/zip",
|
||||||
|
".mp3" => "audio/mpeg",
|
||||||
|
".m3u" => "audio/x-mpegurl",
|
||||||
|
".wma" => "audio/x-ms-wma",
|
||||||
|
".wax" => "audio/x-ms-wax",
|
||||||
|
".ogg" => "application/ogg",
|
||||||
|
".wav" => "audio/x-wav",
|
||||||
|
".gif" => "image/gif",
|
||||||
|
".jpg" => "image/jpeg",
|
||||||
|
".jpeg" => "image/jpeg",
|
||||||
|
".png" => "image/png",
|
||||||
|
".svg" => "image/svg+xml",
|
||||||
|
".xbm" => "image/x-xbitmap",
|
||||||
|
".xpm" => "image/x-xpixmap",
|
||||||
|
".xwd" => "image/x-xwindowdump",
|
||||||
|
".css" => "text/css",
|
||||||
|
".html" => "text/html",
|
||||||
|
".htm" => "text/html",
|
||||||
|
".js" => "text/javascript",
|
||||||
|
".asc" => "text/plain",
|
||||||
|
".c" => "text/plain",
|
||||||
|
".cpp" => "text/plain",
|
||||||
|
".log" => "text/plain",
|
||||||
|
".conf" => "text/plain",
|
||||||
|
".text" => "text/plain",
|
||||||
|
".txt" => "text/plain",
|
||||||
|
".dtd" => "text/xml",
|
||||||
|
".xml" => "text/xml",
|
||||||
|
".mpeg" => "video/mpeg",
|
||||||
|
".mpg" => "video/mpeg",
|
||||||
|
".mov" => "video/quicktime",
|
||||||
|
".qt" => "video/quicktime",
|
||||||
|
".avi" => "video/x-msvideo",
|
||||||
|
".asf" => "video/x-ms-asf",
|
||||||
|
".asx" => "video/x-ms-asf",
|
||||||
|
".wmv" => "video/x-ms-wmv",
|
||||||
|
".bz2" => "application/x-bzip",
|
||||||
|
".tbz" => "application/x-bzip-compressed-tar",
|
||||||
|
".tar.bz2" => "application/x-bzip-compressed-tar",
|
||||||
|
".rpm" => "application/x-rpm",
|
||||||
|
".cfg" => "text/plain"
|
||||||
|
)
|
||||||
|
|
||||||
|
# Use the "Content-Type" extended attribute to obtain mime type if possible
|
||||||
|
#mimetype.use-xattr = "enable"
|
||||||
|
|
||||||
|
|
||||||
|
## send a different Server: header
|
||||||
|
## be nice and keep it at lighttpd
|
||||||
|
# server.tag = "lighttpd"
|
||||||
|
|
||||||
|
#### accesslog module
|
||||||
|
accesslog.filename = "/var/log/lighttpd-access.log"
|
||||||
|
|
||||||
|
|
||||||
|
## deny access the file-extensions
|
||||||
|
#
|
||||||
|
# ~ is for backupfiles from vi, emacs, joe, ...
|
||||||
|
# .inc is often used for code includes which should in general not be part
|
||||||
|
# of the document-root
|
||||||
|
url.access-deny = ( "~", ".inc" )
|
||||||
|
|
||||||
|
$HTTP["url"] =~ "\.pdf$" {
|
||||||
|
server.range-requests = "disable"
|
||||||
|
}
|
||||||
|
|
||||||
|
##
|
||||||
|
# which extensions should not be handle via static-file transfer
|
||||||
|
#
|
||||||
|
# .php, .pl, .fcgi are most often handled by mod_fastcgi or mod_cgi
|
||||||
|
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
|
||||||
|
|
||||||
|
######### Options that are good to be but not neccesary to be changed #######
|
||||||
|
|
||||||
|
## bind to port (default: 80)
|
||||||
|
#server.port = 81
|
||||||
|
|
||||||
|
## bind to localhost (default: all interfaces)
|
||||||
|
#server.bind = "grisu.home.kneschke.de"
|
||||||
|
|
||||||
|
## error-handler for status 404
|
||||||
|
#server.error-handler-404 = "/error-handler.html"
|
||||||
|
#server.error-handler-404 = "/error-handler.php"
|
||||||
|
|
||||||
|
## to help the rc.scripts
|
||||||
|
server.pid-file = "/var/run/lighttpd.pid"
|
||||||
|
|
||||||
|
|
||||||
|
###### virtual hosts
|
||||||
|
##
|
||||||
|
## If you want name-based virtual hosting add the next three settings and load
|
||||||
|
## mod_simple_vhost
|
||||||
|
##
|
||||||
|
## document-root =
|
||||||
|
## virtual-server-root + virtual-server-default-host + virtual-server-docroot
|
||||||
|
## or
|
||||||
|
## virtual-server-root + http-host + virtual-server-docroot
|
||||||
|
##
|
||||||
|
#simple-vhost.server-root = "/home/weigon/wwwroot/servers/"
|
||||||
|
#simple-vhost.default-host = "grisu.home.kneschke.de"
|
||||||
|
#simple-vhost.document-root = "/pages/"
|
||||||
|
|
||||||
|
|
||||||
|
##
|
||||||
|
## Format: <errorfile-prefix><status-code>.html
|
||||||
|
## -> ..../status-404.html for 'File not found'
|
||||||
|
#server.errorfile-prefix = "/home/weigon/projects/lighttpd/doc/status-"
|
||||||
|
|
||||||
|
## virtual directory listings
|
||||||
|
##
|
||||||
|
## disabled as per Nessus scan CVE: 5.0 40984
|
||||||
|
## Please do NOT enable as this is a security
|
||||||
|
## vulnerability. If you want dir listing for
|
||||||
|
## our dir path then a) either add a dir index (index.html)
|
||||||
|
## file within your dir path, or b) add your path as an exception
|
||||||
|
## rule (see the one for feeds/ dir below)
|
||||||
|
dir-listing.activate = "disable"
|
||||||
|
|
||||||
|
## enable debugging
|
||||||
|
#debug.log-request-header = "enable"
|
||||||
|
#debug.log-response-header = "enable"
|
||||||
|
#debug.log-request-handling = "enable"
|
||||||
|
#debug.log-file-not-found = "enable"
|
||||||
|
|
||||||
|
### only root can use these options
|
||||||
|
#
|
||||||
|
# chroot() to directory (default: no chroot() )
|
||||||
|
#server.chroot = "/"
|
||||||
|
|
||||||
|
## change uid to <uid> (default: don't care)
|
||||||
|
#server.username = "wwwrun"
|
||||||
|
|
||||||
|
## change uid to <uid> (default: don't care)
|
||||||
|
#server.groupname = "wwwrun"
|
||||||
|
|
||||||
|
## defaults to /var/tmp
|
||||||
|
server.upload-dirs = ( "/tmp" )
|
||||||
|
|
||||||
|
## change max-keep-alive-idle (default: 5 secs)
|
||||||
|
#server.max-keep-alive-idle = 5
|
||||||
|
|
||||||
|
#### compress module
|
||||||
|
#compress.cache-dir = "/tmp/lighttpd/cache/compress/"
|
||||||
|
#compress.filetype = ("text/plain", "text/html")
|
||||||
|
|
||||||
|
#### proxy module
|
||||||
|
## read proxy.txt for more info
|
||||||
|
|
||||||
|
# Proxy all non-static content to the local horizon dashboard
|
||||||
|
$HTTP["url"] !~ "^/(rel-[^/]*|feed|updates|static)/" {
|
||||||
|
proxy.server = ( "" =>
|
||||||
|
( "localhost" =>
|
||||||
|
(
|
||||||
|
"host" => "127.0.0.1",
|
||||||
|
"port" => 8080
|
||||||
|
)
|
||||||
|
)
|
||||||
|
)
|
||||||
|
}
|
||||||
|
|
||||||
|
#### fastcgi module
|
||||||
|
## read fastcgi.txt for more info
|
||||||
|
## for PHP don't forget to set cgi.fix_pathinfo = 1 in the php.ini
|
||||||
|
#fastcgi.server = ( ".php" =>
|
||||||
|
# ( "localhost" =>
|
||||||
|
# (
|
||||||
|
# "socket" => "/tmp/php-fastcgi.socket",
|
||||||
|
# "bin-path" => "/usr/local/bin/php"
|
||||||
|
# )
|
||||||
|
# )
|
||||||
|
# )
|
||||||
|
|
||||||
|
#### CGI module
|
||||||
|
#cgi.assign = ( ".pl" => "/usr/bin/perl",
|
||||||
|
# ".cgi" => "/usr/bin/perl" )
|
||||||
|
#
|
||||||
|
|
||||||
|
#### Listen to IPv6
|
||||||
|
$SERVER["socket"] == "[::]:80" { }
|
||||||
|
|
||||||
|
#### status module
|
||||||
|
#status.status-url = "/server-status"
|
||||||
|
#status.config-url = "/server-config"
|
||||||
|
|
||||||
|
#### auth module
|
||||||
|
## read authentication.txt for more info
|
||||||
|
#auth.backend = "plain"
|
||||||
|
#auth.backend.plain.userfile = "lighttpd.user"
|
||||||
|
#auth.backend.plain.groupfile = "lighttpd.group"
|
||||||
|
|
||||||
|
#auth.backend.ldap.hostname = "localhost"
|
||||||
|
#auth.backend.ldap.base-dn = "dc=my-domain,dc=com"
|
||||||
|
#auth.backend.ldap.filter = "(uid=$)"
|
||||||
|
|
||||||
|
#auth.require = ( "/server-status" =>
|
||||||
|
# (
|
||||||
|
# "method" => "digest",
|
||||||
|
# "realm" => "download archiv",
|
||||||
|
# "require" => "user=jan"
|
||||||
|
# ),
|
||||||
|
# "/server-config" =>
|
||||||
|
# (
|
||||||
|
# "method" => "digest",
|
||||||
|
# "realm" => "download archiv",
|
||||||
|
# "require" => "valid-user"
|
||||||
|
# )
|
||||||
|
# )
|
||||||
|
|
||||||
|
#### url handling modules (rewrite, redirect, access)
|
||||||
|
#url.rewrite = ( "^/$" => "/server-status" )
|
||||||
|
#url.redirect = ( "^/wishlist/(.+)" => "http://www.123.org/$1" )
|
||||||
|
|
||||||
|
#### both rewrite/redirect support back reference to regex conditional using %n
|
||||||
|
#$HTTP["host"] =~ "^www\.(.*)" {
|
||||||
|
# url.redirect = ( "^/(.*)" => "http://%1/$1" )
|
||||||
|
#}
|
||||||
|
|
||||||
|
#
|
||||||
|
# define a pattern for the host url finding
|
||||||
|
# %% => % sign
|
||||||
|
# %0 => domain name + tld
|
||||||
|
# %1 => tld
|
||||||
|
# %2 => domain name without tld
|
||||||
|
# %3 => subdomain 1 name
|
||||||
|
# %4 => subdomain 2 name
|
||||||
|
#
|
||||||
|
#evhost.path-pattern = "/home/storage/dev/www/%3/htdocs/"
|
||||||
|
|
||||||
|
#### expire module
|
||||||
|
#expire.url = ( "/buggy/" => "access 2 hours", "/asdhas/" => "access plus 1 seconds 2 minutes")
|
||||||
|
|
||||||
|
#### ssi
|
||||||
|
#ssi.extension = ( ".shtml" )
|
||||||
|
|
||||||
|
#### rrdtool
|
||||||
|
#rrdtool.binary = "/usr/bin/rrdtool"
|
||||||
|
#rrdtool.db-name = "/var/www/lighttpd.rrd"
|
||||||
|
|
||||||
|
#### setenv
|
||||||
|
#setenv.add-request-header = ( "TRAV_ENV" => "mysql://user@host/db" )
|
||||||
|
#setenv.add-response-header = ( "X-Secret-Message" => "42" )
|
||||||
|
|
||||||
|
## for mod_trigger_b4_dl
|
||||||
|
# trigger-before-download.gdbm-filename = "/home/weigon/testbase/trigger.db"
|
||||||
|
# trigger-before-download.memcache-hosts = ( "127.0.0.1:11211" )
|
||||||
|
# trigger-before-download.trigger-url = "^/trigger/"
|
||||||
|
# trigger-before-download.download-url = "^/download/"
|
||||||
|
# trigger-before-download.deny-url = "http://127.0.0.1/index.html"
|
||||||
|
# trigger-before-download.trigger-timeout = 10
|
||||||
|
|
||||||
|
## for mod_cml
|
||||||
|
## don't forget to add index.cml to server.indexfiles
|
||||||
|
# cml.extension = ".cml"
|
||||||
|
# cml.memcache-hosts = ( "127.0.0.1:11211" )
|
||||||
|
|
||||||
|
#### variable usage:
|
||||||
|
## variable name without "." is auto prefixed by "var." and becomes "var.bar"
|
||||||
|
#bar = 1
|
||||||
|
#var.mystring = "foo"
|
||||||
|
|
||||||
|
## integer add
|
||||||
|
#bar += 1
|
||||||
|
## string concat, with integer cast as string, result: "www.foo1.com"
|
||||||
|
#server.name = "www." + mystring + var.bar + ".com"
|
||||||
|
## array merge
|
||||||
|
#index-file.names = (foo + ".php") + index-file.names
|
||||||
|
#index-file.names += (foo + ".php")
|
||||||
|
|
||||||
|
#### include
|
||||||
|
#include /etc/lighttpd/lighttpd-inc.conf
|
||||||
|
## same as above if you run: "lighttpd -f /etc/lighttpd/lighttpd.conf"
|
||||||
|
#include "lighttpd-inc.conf"
|
||||||
|
|
||||||
|
#### include_shell
|
||||||
|
#include_shell "echo var.a=1"
|
||||||
|
## the above is same as:
|
||||||
|
#var.a=1
|
||||||
|
|
||||||
|
# deny access to feed directories for external connections.
|
||||||
|
# Only enable access to dir listing for feed directory if on internal network
|
||||||
|
# (i.e. mgmt or pxeboot networks)
|
||||||
|
include "/etc/lighttpd/lighttpd-inc.conf"
|
||||||
|
$HTTP["remoteip"] != "127.0.0.1" {
|
||||||
|
$HTTP["url"] =~ "^/(rel-[^/]*|feed|updates)/" {
|
||||||
|
dir-listing.activate = "enable"
|
||||||
|
}
|
||||||
|
$HTTP["remoteip"] != var.management_ip_network {
|
||||||
|
$HTTP["remoteip"] != var.pxeboot_ip_network {
|
||||||
|
$HTTP["url"] =~ "^/(rel-[^/]*|feed|updates)/" {
|
||||||
|
url.access-deny = ( "" )
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
$HTTP["scheme"] == "https" {
|
||||||
|
setenv.add-response-header = ( "Strict-Transport-Security" => "max-age=63072000; includeSubdomains; ")
|
||||||
|
}
|
124
lighttpd-config/files/lighttpd.init
Executable file
124
lighttpd-config/files/lighttpd.init
Executable file
@ -0,0 +1,124 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
### BEGIN INIT INFO
|
||||||
|
# Provides: Web Server
|
||||||
|
# Required-Start: networking
|
||||||
|
# Required-Stop: networking
|
||||||
|
# Default-Start: 2 3 4 5
|
||||||
|
# Default-Stop: 0 1 6
|
||||||
|
# Short-Description: Lighttpd Web Server
|
||||||
|
# Description: Web service to serve static files and proxy
|
||||||
|
### END INIT INFO
|
||||||
|
|
||||||
|
PATH=/sbin:/bin:/usr/sbin:/usr/bin
|
||||||
|
DAEMON=/usr/sbin/lighttpd
|
||||||
|
NAME=lighttpd
|
||||||
|
DESC="Lighttpd Web Server"
|
||||||
|
OPTS="-f /etc/lighttpd/lighttpd.conf"
|
||||||
|
PIDFILE="/var/run/$NAME.pid"
|
||||||
|
PORT="80"
|
||||||
|
|
||||||
|
start()
|
||||||
|
{
|
||||||
|
|
||||||
|
if lsof -t -i:${PORT} 1> /dev/null 2>&1; then
|
||||||
|
kill $(lsof -t -i:${PORT}) > /dev/null 2>&1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -e $PIDFILE ]; then
|
||||||
|
PIDDIR=/proc/$(cat $PIDFILE)
|
||||||
|
if [ -d ${PIDDIR} ]; then
|
||||||
|
echo "$DESC already running."
|
||||||
|
return
|
||||||
|
else
|
||||||
|
echo "Removing stale PID file $PIDFILE"
|
||||||
|
rm -f $PIDFILE
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo -n "Checking scratch filesystem..."
|
||||||
|
let -i COUNT=0
|
||||||
|
while [ ! -e /scratch ]
|
||||||
|
do
|
||||||
|
if [ $COUNT -ge 15 ]
|
||||||
|
then
|
||||||
|
echo "failed to find /scratch."
|
||||||
|
exit -1
|
||||||
|
fi
|
||||||
|
let COUNT=COUNT+1
|
||||||
|
sleep 1
|
||||||
|
done
|
||||||
|
|
||||||
|
echo -n "Mounting scratch filesystem to chroot tmp..."
|
||||||
|
umount /www/tmp >& /dev/null
|
||||||
|
rm -r /scratch/lighttpd >& /dev/null
|
||||||
|
mkdir -p /scratch/lighttpd
|
||||||
|
mount --bind /scratch/lighttpd /www/tmp/
|
||||||
|
chown www /www/tmp/
|
||||||
|
|
||||||
|
echo -n "Starting $DESC..."
|
||||||
|
|
||||||
|
start-stop-daemon --start --pidfile ${PIDFILE} -x "$DAEMON" -- $OPTS
|
||||||
|
RETVAL=$?
|
||||||
|
if [ $RETVAL -eq 0 ]; then
|
||||||
|
echo "done."
|
||||||
|
else
|
||||||
|
echo "failed."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
stop()
|
||||||
|
{
|
||||||
|
if [ ! -e $PIDFILE ]; then return; fi
|
||||||
|
|
||||||
|
echo -n "Stopping $DESC..."
|
||||||
|
|
||||||
|
start-stop-daemon --stop --quiet --pidfile ${PIDFILE} -x "$DAEMON"
|
||||||
|
RETVAL=$?
|
||||||
|
if [ $RETVAL -eq 0 ]; then
|
||||||
|
echo "done."
|
||||||
|
else
|
||||||
|
echo "failed."
|
||||||
|
fi
|
||||||
|
rm -f $PIDFILE
|
||||||
|
echo -n "Unmounting scratch filesystem from chroot tmp..."
|
||||||
|
umount /www/tmp
|
||||||
|
}
|
||||||
|
|
||||||
|
status()
|
||||||
|
{
|
||||||
|
pid=`cat $PIDFILE 2>/dev/null`
|
||||||
|
if [ -n "$pid" ]; then
|
||||||
|
if ps -p $pid &>/dev/null ; then
|
||||||
|
echo "$DESC is running"
|
||||||
|
RETVAL=0
|
||||||
|
return
|
||||||
|
else
|
||||||
|
RETVAL=1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
echo "$DESC is not running"
|
||||||
|
RETVAL=3
|
||||||
|
}
|
||||||
|
|
||||||
|
case "$1" in
|
||||||
|
start)
|
||||||
|
start
|
||||||
|
;;
|
||||||
|
stop)
|
||||||
|
stop
|
||||||
|
;;
|
||||||
|
restart|force-reload|reload)
|
||||||
|
stop
|
||||||
|
start
|
||||||
|
;;
|
||||||
|
status)
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "Usage: $0 {start|stop|force-reload|restart|reload|status}"
|
||||||
|
RETVAL=1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
exit $RETVAL
|
14
lighttpd-config/files/lighttpd.logrotate
Normal file
14
lighttpd-config/files/lighttpd.logrotate
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
/var/log/lighttpd-access.log
|
||||||
|
/var/log/lighttpd-error.log
|
||||||
|
/www/var/log/lighttpd-access.log
|
||||||
|
/www/var/log/lighttpd-error.log {
|
||||||
|
nodateext
|
||||||
|
size 10M
|
||||||
|
start 1
|
||||||
|
rotate 10
|
||||||
|
missingok
|
||||||
|
notifempty
|
||||||
|
compress
|
||||||
|
delaycompress
|
||||||
|
copytruncate
|
||||||
|
}
|
Loading…
x
Reference in New Issue
Block a user