# {{{ variables
var.logdir   = "/var/log/lighttpd"
var.statedir = "/var/lib/lighttpd"
# }}}

server.modules   = (
 "mod_openssl",
 "mod_access",
 #"mod_setenv",
 #"mod_auth",
 "mod_rewrite",
 #"mod_redirect",
 #"mod_status",
 #"mod_simple_vhost",
 #"mod_evhost",
 #"mod_alias",
 #"mod_userdir",
 "mod_fastcgi",
 "mod_proxy",
 #"mod_cgi",
 #"mod_ssi",
 "mod_deflate",
 "mod_expire",
 #"mod_rrdtool",
 "mod_accesslog"
)

include "mime-types.conf"

server.username      = "lighttpd"
server.groupname     = "lighttpd"

server.document-root = "${HTDOCS}"
server.pid-file      = "/run/lighttpd.pid"

server.errorlog      = var.logdir  + "/error.log"

server.indexfiles    = ("index.php", "index.html", "index.htm", "default.htm")

server.follow-symlink = "enable"

server.port	= ${BIND_PORT}
server.bind	= "${BIND_HOST}"

server.stat-cache-engine = "fam"

# If lighttpd was build with IPv6 support, and you would like to listen on IPv6,
# uncomment the following:
#server.use-ipv6 = "enable"

static-file.exclude-extensions = (".php", ".pl", ".cgi", ".fcgi")

#accesslog.filename   = var.logdir + "/access.log"

# don't list hidden files/directories
dir-listing.hide-dotfiles = "enable"

url.access-deny = ("~", ".inc")

#deflate.enabled = "enable"
deflate.allowed-encodings = ( "gzip", "deflate" )
deflate.min-compress-size = 10
deflate.max-compress-size = 131072
deflate.compression-level = ${ZLIB_COMPRESS_LEVEL}
deflate.mimetypes   = ("text/html", "text/css", "text/javascript", "image/svg+xml", "text/plain", "text/xml")
#deflate.cache-dir   = var.statedir + "/cache/compress"

   include "mod_fastcgi.conf"

server.breakagelog = "/var/log/lighttpd/breakage.log"

server.max-fds = 4096
server.max-connections = 2048
server.max-keep-alive-requests = 16
server.max-keep-alive-idle = 5
server.max-read-idle = 60
server.max-write-idle = 360
server.stream-response-body = 2

$SERVER["socket"] == "${BIND_HOST}:${BIND_PORT_SSL}" {
  ssl.engine = "enable"
  ssl.pemfile = "${SSL_CERT_PATH}"
  ssl.privkey = "${SSL_KEY_PATH}"
}

server.max-worker = 4