From 507a781f13032524594023284779cd93cab259e5 Mon Sep 17 00:00:00 2001 From: John Klug Date: Tue, 3 Dec 2019 17:47:24 -0600 Subject: http->https redirect, certificate --- etc/lighttpd-commission.conf | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/etc/lighttpd-commission.conf b/etc/lighttpd-commission.conf index 67a8189..5317eb5 100644 --- a/etc/lighttpd-commission.conf +++ b/etc/lighttpd-commission.conf @@ -136,7 +136,7 @@ static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" ) ######### Options that are good to be but not neccesary to be changed ####### ## bind to port (default: 80) -#server.port = 81 +server.port = 80 ## bind to localhost (default: all interfaces) #server.bind = "grisu.home.kneschke.de" @@ -231,8 +231,18 @@ fastcgi.server = ( ".php" => # #### SSL engine -#ssl.engine = "enable" -#ssl.pemfile = "server.pem" +ssl.engine = "enable" +ssl.pemfile = "/var/config/server.pem" + +$SERVER["socket"] == ":443" { +ssl.engine = "enable" +ssl.pemfile = "/var/config/server.pem" +ssl.use-sslv3 = "enable" +ssl.openssl.ssl-conf-cmd = ("Protocol" => "-ALL, -TLSv1, -SSLv3") +server.document-root = "/www/commission" +} else $HTTP["host"] =~ "^(.+)(:[0-9]+)?$" { + url.redirect = ( "^/(.*)$" => "https://%1:443/$1" ) +} #### status module #status.status-url = "/server-status" -- cgit v1.2.3