remove lighttpd config

This commit is contained in:
2024-12-19 15:00:56 +01:00
parent a07ccc6c1b
commit 710932c37f
3 changed files with 0 additions and 74 deletions

View File

@@ -1,12 +0,0 @@
services:
lighttpd:
container_name: lighttpd
image: webserver:latest
ports:
- 80:81
restart: unless-stopped
volumes:
- /opt/lighttpd/etc:/host/etc
- /home/user/certs:/host/etc/certs
- /opt/lighttpd/var/log:/host/var/log
- /home/user/www:/host/var/www/global

View File

@@ -1 +0,0 @@
user:makreel

View File

@@ -1,61 +0,0 @@
server.modules += ("mod_auth", "mod_setenv")
$SERVER["socket"] == ":81" {
server.document-root = "/host/var/www/global"
auth.backend = "plain"
auth.backend.plain.userfile = "/host/etc/.lighttpdpassword"
$HTTP["url"] !~ "^(/public/.*|/.well-known/.*)" {
auth.require = (
"/" => (
"method" => "basic",
"realm" => "Password protected area",
"require" => "valid-user"
)
)
}
$HTTP["host"] =~ "^bewind\.veenboer\.online" {
url.redirect = ( "^/(.*)" => "https://bewind.veenboer.online/" )
}
}
$SERVER["socket"] == ":443" {
server.document-root = "/host/var/www/global"
# Enable SSL
ssl.engine = "enable"
ssl.pemfile = "/host/etc/certs/key+certificate.pem"
ssl.ca-file = "/host/etc/certs/intermediate.pem"
ssl.dh-file = "/host/etc/certs/dh.pem"
# Increased security, from https://cipherli.st/
ssl.honor-cipher-order = "enable"
ssl.cipher-list = "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"
setenv.add-response-header = (
"Strict-Transport-Security" => "max-age=63072000; includeSubdomains; preload",
"X-Frame-Options" => "DENY",
"X-Content-Type-Options" => "nosniff"
)
ssl.use-sslv2 = "disable"
ssl.use-sslv3 = "disable"
# Increased security, from https://raymii.org/s/tutorials/HTTP_Strict_Transport_Security_for_Apache_NGINX_and_Lighttpd.html
$HTTP["scheme"] == "https" {
setenv.add-response-header = (
# "Strict-Transport-Security" => "max-age=63072000; includeSubdomains; preload",
"X-Frame-Options" => "DENY"
)
}
# Authentication
auth.backend = "plain"
auth.backend.plain.userfile = "/host/etc/.lighttpdpassword"
auth.require = (
"/" => (
"method" => "basic",
"realm" => "Password protected area",
"require" => "valid-user"
)
)
}