server.port = 80
server.bind="192.0.2.1"

# default values
server.max-read-idle = 60;
server.max-write-idle = 360;
server.max-keep-alive-idle = 5;

## send a different Server: header
## be nice and keep it at lighttpd
server.tag                 = "lighttpd"

$HTTP["host"] != "news.example.org" {
    simple-vhost.server-root = "/srv/nginx/vhosts/"
    simple-vhost.default-host = "example.org"
    simple-vhost.document-root = "pages"
    server.errorlog = log_root + "/default-error.log"
    accesslog.filename = log_root + "/default-access.log"
}

$HTTP["host"] == "news.example.org" {
    server.document-root = "/var/www/servers/news2.example.org/pages/"
    server.errorlog = log_root + "/news_example_org-error.log"
    accesslog.filename = log_root + "/news_example_org-access.log"
}

$SERVER["socket"] == "10.0.0.1:443" {
        ssl.engine = "enable"
        ssl.pemfile = "/etc/lighttpd/ssl/domain1.com.pem"
        ssl.use-sslv2 = "disable"
        $HTTP["host"] == "domain1.com" {
          server.document-root = "/srv/nginx/vhosts/domain1.com"
        }
        server.errorlog = log_root + "/domain1_com-error.log"
        accesslog.filename = log_root + "/domain1_com-access.log"
    }

$SERVER["socket"] == "10.0.0.2:443" {
        ssl.engine = "enable"
        ssl.pemfile = "/etc/lighttpd/ssl/domain2.com.pem"
        ssl.use-sslv2 = "disable"
        $HTTP["host"] == "domain2.com" {
          server.document-root = "/www/servers/domain2.com"
        }
        server.errorlog = log_root + "/domain2_com-error.log"
        accesslog.filename = log_root + "/domain2_com-access.log"
    }

##
## Some Variable definition which will make chrooting easier.
##
## if you add a variable here. Add the corresponding variable in the
## chroot example aswell.
##
var.log_root    = "/var/log/lighttpd"

##
##  Logging Options
## ------------------
##
## all logging options can be overwritten per vhost.
##
## Path to the error log file
##
server.errorlog             = log_root + "/error.log"

##
## Some Variable definition which will make chrooting easier.
##
## if you add a variable here. Add the corresponding variable in the
## chroot example aswell.
##
var.log_root    = "/var/log/lighttpd"

##
## Default access log.
##
accesslog.filename          = log_root + "/access.log"

##
## The default format produces CLF compatible output.
## For available parameters see access.txt
##
#accesslog.format = "%h %l %u %t \"%r\" %b %>s \"%{User-Agent}i\" \"%{Referer}i\""

# We need to load the module first.
server.modules = ( ..., "mod_status", ... )

# If you want to open the status page just for users from the local network
# cover it in a conditional.
$HTTP["remoteip"] == "10.0.0.0/8" {
    status.status-url = "/server-status" 
}

##
## enable server-status
##
include "conf.d/status.conf"

$HTTP["remoteip"] == "10.0.0.0/8" {
##
## configure urls for the various parts of the module.
##
  status.status-url          = "/server-status"
  status.config-url          = "/server-config"
  status.statistics-url      = "/server-statistics"
##
## add JavaScript which allows client-side sorting for the connection
## overview
##
  status.enable-sort         = "enable"
}

$HTTP["remoteip"] == "127.0.0.0/8" {
##
## configure urls for the various parts of the module.
##
  status.status-url          = "/server-status"
  status.config-url          = "/server-config"
  status.statistics-url      = "/server-statistics"
##
## add JavaScript which allows client-side sorting for the connection
## overview
##
  status.enable-sort         = "enable"
}

$HTTP["remoteip"] == "10.0.0.0/8" {
##
## configure urls for the various parts of the module.
##
  status.status-url          = "/server-status"
  status.config-url          = "/server-config"
  status.statistics-url      = "/server-statistics"
##
## add JavaScript which allows client-side sorting for the connection
## overview
##
  status.enable-sort         = "enable"
}

##
#######################################################################

proxy.balance = "fair"
$HTTP["host"] == "cen05dev.xen.wbcd.pl" {
  proxy.balance = "hash"
  proxy.server  = ( "" => (
                            ( "host" => "10.41.0.54", "port" => 81 ),
                            ( "host" => "10.41.0.56", "port" => 81 )
                          ) )
}
$HTTP["host"] == "cen06dev.xen.wbcd.pl" {
  proxy.balance = "hash"
  proxy.server  = ( "" => (
                            ( "host" => "10.41.0.54", "port" => 81 ),
                            ( "host" => "10.41.0.56", "port" => 81 )
                          ) )
}

setenv.add-request-header = ("X-Proxy" => server.name)
setenv.add-response-header = ("MyHeader" => "Hello From Lighttpd")

setenv.set-request-header = ("X-Proxy" => server.name)
setenv.set-response-header = ("MyHeader" => "Hello From Lighttpd")

$SERVER["socket"] == ":443" {
ssl.engine = "enable"
}

ssl.pemfile = "/etc/lighttpd/ssl/server.pem"
ssl.ca-file = "/etc/lighttpd/ssl/ca.crt"
ssl.dh-file = "/etc/lighttpd/ssl/dh2048.pem"

ssl.use-sslv2 = "disable"
ssl.use-sslv3 = "disable"

# The more generic version (without the restriction to RSA keys) is
ssl.cipher-list = "HIGH !aNULL !3DES +kEDH +kRSA !kSRP !kPSK"
# Make the server prefer the order of the server side cipher suite instead of the client suite.
# This option is enabled by default, but only used if ssl.cipher-list is set.
ssl.honor-cipher-order = "enable"

ssl.disable-client-renegotiation = "disable"