remove lighttpd config
This commit is contained in:
@@ -1,12 +0,0 @@
|
|||||||
services:
|
|
||||||
lighttpd:
|
|
||||||
container_name: lighttpd
|
|
||||||
image: webserver:latest
|
|
||||||
ports:
|
|
||||||
- 80:81
|
|
||||||
restart: unless-stopped
|
|
||||||
volumes:
|
|
||||||
- /opt/lighttpd/etc:/host/etc
|
|
||||||
- /home/user/certs:/host/etc/certs
|
|
||||||
- /opt/lighttpd/var/log:/host/var/log
|
|
||||||
- /home/user/www:/host/var/www/global
|
|
||||||
@@ -1 +0,0 @@
|
|||||||
user:makreel
|
|
||||||
@@ -1,61 +0,0 @@
|
|||||||
server.modules += ("mod_auth", "mod_setenv")
|
|
||||||
|
|
||||||
$SERVER["socket"] == ":81" {
|
|
||||||
server.document-root = "/host/var/www/global"
|
|
||||||
auth.backend = "plain"
|
|
||||||
auth.backend.plain.userfile = "/host/etc/.lighttpdpassword"
|
|
||||||
|
|
||||||
$HTTP["url"] !~ "^(/public/.*|/.well-known/.*)" {
|
|
||||||
auth.require = (
|
|
||||||
"/" => (
|
|
||||||
"method" => "basic",
|
|
||||||
"realm" => "Password protected area",
|
|
||||||
"require" => "valid-user"
|
|
||||||
)
|
|
||||||
)
|
|
||||||
}
|
|
||||||
|
|
||||||
$HTTP["host"] =~ "^bewind\.veenboer\.online" {
|
|
||||||
url.redirect = ( "^/(.*)" => "https://bewind.veenboer.online/" )
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
$SERVER["socket"] == ":443" {
|
|
||||||
server.document-root = "/host/var/www/global"
|
|
||||||
|
|
||||||
# Enable SSL
|
|
||||||
ssl.engine = "enable"
|
|
||||||
ssl.pemfile = "/host/etc/certs/key+certificate.pem"
|
|
||||||
ssl.ca-file = "/host/etc/certs/intermediate.pem"
|
|
||||||
ssl.dh-file = "/host/etc/certs/dh.pem"
|
|
||||||
|
|
||||||
# Increased security, from https://cipherli.st/
|
|
||||||
ssl.honor-cipher-order = "enable"
|
|
||||||
ssl.cipher-list = "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"
|
|
||||||
setenv.add-response-header = (
|
|
||||||
"Strict-Transport-Security" => "max-age=63072000; includeSubdomains; preload",
|
|
||||||
"X-Frame-Options" => "DENY",
|
|
||||||
"X-Content-Type-Options" => "nosniff"
|
|
||||||
)
|
|
||||||
ssl.use-sslv2 = "disable"
|
|
||||||
ssl.use-sslv3 = "disable"
|
|
||||||
|
|
||||||
# Increased security, from https://raymii.org/s/tutorials/HTTP_Strict_Transport_Security_for_Apache_NGINX_and_Lighttpd.html
|
|
||||||
$HTTP["scheme"] == "https" {
|
|
||||||
setenv.add-response-header = (
|
|
||||||
# "Strict-Transport-Security" => "max-age=63072000; includeSubdomains; preload",
|
|
||||||
"X-Frame-Options" => "DENY"
|
|
||||||
)
|
|
||||||
}
|
|
||||||
|
|
||||||
# Authentication
|
|
||||||
auth.backend = "plain"
|
|
||||||
auth.backend.plain.userfile = "/host/etc/.lighttpdpassword"
|
|
||||||
auth.require = (
|
|
||||||
"/" => (
|
|
||||||
"method" => "basic",
|
|
||||||
"realm" => "Password protected area",
|
|
||||||
"require" => "valid-user"
|
|
||||||
)
|
|
||||||
)
|
|
||||||
}
|
|
||||||
Reference in New Issue
Block a user