# {{{ variables
var.logdir   = "/var/log/lighttpd"
var.statedir = "/var/lib/lighttpd"
# }}}

server.modules = (
    "mod_rewrite",
    "mod_access",
    "mod_deflate",
    "mod_expire",
#    "mod_accesslog",
    "mod_openssl",
)

include "mime-types.conf"

server.username      = "lighttpd"
server.groupname     = "lighttpd"

server.document-root = "${HTDOCS}"
server.pid-file      = "/run/lighttpd.pid"

server.errorlog      = var.logdir  + "/error.log"

server.indexfiles    = ("index.php", "index.html", "index.htm", "default.htm")

server.follow-symlink = "enable"

server.port	= ${BIND_PORT}
server.bind	= "${BIND_HOST}"

server.stat-cache-engine = "fam"

# If lighttpd was build with IPv6 support, and you would like to listen on IPv6,
# uncomment the following:
#server.use-ipv6 = "enable"

static-file.exclude-extensions = (".php", ".pl", ".cgi", ".fcgi")

#accesslog.filename   = var.logdir + "/access.log"

# don't list hidden files/directories
dir-listing.hide-dotfiles = "enable"

url.access-deny = ("~", ".inc")

deflate.enabled = "enable"
deflate.allowed_encodings = ( "gzip", "deflate" )
deflate.min-compress-size = 10
deflate.mimetypes   = ("text/plain", "text/html", "text/css", "text/javascript", "image/svg+xml")
deflate.cache-dir   = var.statedir + "/cache/compress"

   include "mod_fastcgi.conf"

server.breakagelog = "/var/log/lighttpd/breakage.log"

server.max-fds = 4096
server.max-connections = 2048
server.max-keep-alive-requests = 16
server.max-keep-alive-idle = 5
server.max-read-idle = 60
server.max-write-idle = 360
server.stream-response-body = 2

$SERVER["socket"] == "${BIND_HOST}:${BIND_PORT_SSL}" {
  ssl.engine = "enable"
  ssl.pemfile = "${SSL_CERT_PATH}"
  ssl.privkey = "${SSL_KEY_PATH}"
}

server.max-worker = 0