Differences

This shows you the differences between two versions of the page.

--- software:lighttpd [2018-11-25 21:56] – [cgit] tidy up regex zlg
+++ software:lighttpd [2020-05-26 00:10] (current) – Better match the name zlg
@@ Line 1: / Line 1: @@
 ====== lighttpd ======
-[[https://lighttpd.net|Lighttpd]] (AKA lighty) is a **light**weight **HTTP** server written in C that specializes in low resource usage. Its configuration is powerful, but more terse than Apache and nginx. Due to lighty's focus on resource use, it has a variety of strategies for dealing with high resource use.
+[[https://lighttpd.net|Lighttpd]] (AKA lighty) is a **light**weight **HTTP** **d**aemon (server) written in C that specializes in low resource usage. Its configuration is powerful, but more terse than Apache and nginx. Due to lighty's focus on resource use, it has a variety of strategies for dealing with high resource use.
 Since lighttpd doesn't get much attention in documentation, this page will cover steps to take for common applications or settings that make life easier.
@@ Line 10: / Line 10: @@
 <file conf /etc/lighttpd/lighttpd.conf>
+# Be sure to enable mod_redirect in order to use this.
 $SERVER["socket"] == ":80" {
     url.redirect = ( "" => "https://${url.authority}${url.path}${sqa}" )
@@ Line 20: / Line 21: @@
 ===== cgit =====
+[[https://git.zx2c4.com/cgit|Cgit]] is a CGI-powered Git front-end written in C, using Git's own source code for its heavy lifting.
 Create a new cgit-oriented file somewhere in your configuration hierarchy. Then be sure you're ''include''ing it in lighttpd's main configuration file.
@@ Line 49: / Line 52: @@
 </code>
-Your OS may do things differently; the above is where they're stored for Adélie Linux and Gentoo Linux.
+Your OS may do things differently; the above is where they're stored on my machine.
 Next, be sure you have the correct modules enabled. Additionally, you need to setup a temporary file space with permissions that allow the server to read and write to it. Highlighted source code view with cgit can be rather large, and lighttpd will switch to temporary files when a transfer of data is large enough.
 <file conf /etc/lighttpd/lighttpd.conf>
-server,modules += ( "mod_cgi", "mod_dirlisting" )
+server.modules += ( "mod_cgi", "mod_dirlisting" )
 # Change this to suit your needs:
 server.upload-dirs = ( "/var/tmp/lighttpd" )
@@ Line 74: / Line 77: @@
 rc-service lighttpd start
 </code>
+===== DokuWiki =====
+[[https://dokuwiki.org|DokuWiki]] is a PHP-powered wiki backend meant primarily for documentation.
+A key configuration in DokuWiki is the ''x-sendfile'' option. By default it's set to send the standard ''X-Sendfile'' HTTP header, so the webserver can fetch the file and serve it directly instead of letting the backend (DokuWiki, in this case) do it. This tends to be faster, which is important for wikis displaying a lot of images.
+In the Lighttpd configuration for your DokuWiki instance, be sure to set ''x-sendfile'' to ''enable'', and set ''x-sendfile-docroot'' to an array containing the media directory. It's important to set ''x-sendfile-docroot'' because otherwise, DokuWiki could be abused to output the contents of **any file lighttpd has read access to**. ''x-sendfile'' is disabled by default in Lighttpd, to ensure administrators understand the risks before enabling the header's use.
+Here's an example of a safe configuration, used on this wiki:
+<code>
+server.modules += ( "mod_fastcgi" ) # skip this if you've already enabled it
+fastcgi.server = (
+    ".php" => (
+        "localhost" => (
+            "socket" = "/path/to/socket", # I put mine under /var/run
+            "x-sendfile" => "enable",
+            "x-sendfile-docroot" => ( server.document-root )  # For me it's /srv/www/wiki
+        )
+    )
+)
+</code>
+With the above configuration, the only files DokuWiki will be able to serve statically via Lighttpd will be its own media files. This is exactly what we want!