arch-wiki-md-repo
Version:
All arch-wiki articles in markdown format, updated every two days.
542 lines (370 loc) • 15.4 kB
Markdown
Lighttpd是 一个安全，快速，标准，且非常灵活的网页服务器，并对高性能环境做了最佳化。相较于其他网页服务器它占用的内存很少，且注重CPU负载量。它的进阶功能集 （FastCGI，CGI，验证，输出压缩，网址重写等等）让Lighttpd成为每个试图拜托负载瓶颈的服务器的完美网页服务器软件。
* [1 安装](
* [2 设置](
* [2.1 基本设置](
* [2.2 CGI](
* [2.3 FastCGI](
* [2.3.1 PHP](
* [2.3.1.1 Using php-fpm](
* [2.3.1.2 eAccelerator](
* [2.3.1.3 Try a php page](
* [2.3.2 Ruby on Rails](
* [2.3.3 Python FastCGI](
* [2.4 SSL](
* [2.4.1 Server Name Indication](
* [2.4.2 Redirect HTTP requests to HTTPS](
* [2.5 Output Compression](
* [3 疑难解答](
* [3.1 关于Lighttpd下载.php文件的情况](
* [3.2 CCS样式列表无法正确显示](
* [4 参见](
Lighttpd可以从[extra]仓库获得:
```
```
lighttpd配置文件： `/etc/lighttpd/lighttpd.conf`。在安装完成后它会自动生成一个用于测试的测试页面。
想要检查 `lighttpd.conf` 中的语法错误，可以使用以下命令来快速查找错误：
```
$ lighttpd -t -f /etc/lighttpd/lighttpd.conf
```
预设配置文件会把这里 `/srv/http/` 指定为提供HTTP服务的文件目录。
测试安装结果：
```
```
修改日志目录权限:
```
```
启动服务:
```
```
然后就可以使用浏览器打开网址 `localhost` ，你应该能见到测试页面。
开机自动启动:
```
```
示例配置文件在 `/usr/share/doc/lighttpd/`。
[](https://en.wikipedia.org/wiki/Common_Gateway_Interface "wikipedia:Common Gateway Interface") (CGI) 脚本对于lighttpd可以开箱即用, 你只需要开启CGI模块, 指定配置文件，并确保指定语言的解释器已经安装。 (如：使用python需要安装 [python](https://www.archlinux.org/packages/?name=python))
创建 `/etc/lighttpd/conf.d/cgi.conf` ，添加以下内容:
```
server.modules += ( "mod_cgi" )
cgi.assign = ( ".pl" => "/usr/bin/perl",
".cgi" => "/usr/bin/perl",
".rb" => "/usr/bin/ruby",
".erb" => "/usr/bin/eruby",
".py" => "/usr/bin/python",
".php" => "/usr/bin/php-cgi" )
index-file.names += ( "index.pl", "default.pl",
"index.rb", "default.rb",
"index.erb", "default.erb",
"index.py", "default.py",
"index.php", "default.php" )
```
对于PHP脚本，请确认在 `/etc/php/php.ini`添加了下列配置：
```
cgi.fix_pathinfo = 1
```
在你的lighttpd配置文件中`/etc/lighttpd/lighttpd.conf`添加：
```
include "conf.d/cgi.conf"
```
安装 [fcgi](https://www.archlinux.org/packages/?name=fcgi)，之后你的lighttpd就有了fcgi支持， 以下内容是给需要使用Ruby，PHP或者Python的人的指导。
**注意:** lighttpd现在默认以用户 `http` 运行。
首先复制一份默认配置，从 `/usr/share/doc/lighttpd/config/conf.d/fastcgi.conf` 复制到 `/etc/lighttpd/conf.d`
将以下内容添加到 `/etc/lighttpd/conf.d/fastcgi.conf`
```
server.modules += ( "mod_fastcgi" )
index-file.names += ( "dispatch.fcgi" )
server.error-handler-404 = "/dispatch.fcgi"
fastcgi.server = (
".fcgi" => (
"localhost" => (
"socket" => "/run/lighttpd/rails-fastcgi.sock",
"bin-path" => "/path/to/rails/application/public/dispatch.fcgi"
)
)
)
```
然后在 `/etc/lighttpd/lighttpd.conf`中添加:
```
include "conf.d/fastcgi.conf"
```
下面是关于PHP和Ruby on Rails的指导。
安装 [php](https://www.archlinux.org/packages/?name=php) 和 [php-cgi](https://www.archlinux.org/packages/?name=php-cgi) (可以参阅 [PHP](/index.php/PHP "PHP") 、 [LAMP](/index.php/LAMP "LAMP")).
确认php-cgi可以工作： `php-cgi --version`
```
PHP 5.4.3 (cgi-fcgi) (built: May 8 2012 17:10:17)
Copyright (c) 1997-2012 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2012 Zend Technologies
```
如果输出内容与上面相仿则php已经正确安装。
创建一份新的配置文件:
`/etc/lighttpd/conf.d/fastcgi.conf`
```
server.modules += ("mod_fastcgi")
index-file.names += ("index.php")
fastcgi.server = (
".php" => (
"localhost" => (
"bin-path" => "/usr/bin/php-cgi",
"socket" => "/tmp/php-fastcgi.sock",
"broken-scriptfilename" => "enable",
"max-procs" => 4,
"bin-environment" => (
"PHP_FCGI_CHILDREN" => "1"
)
)
)
)
```
在/etc/lighttpd/lighttpd.conf中添加以下内容使新配置能够应用:
`/etc/lighttpd/lighttpd.conf`
```
include "conf.d/fastcgi.conf"
```
**注意:** 模块顺序十分重要, 正确地模块加载顺序位于 `/usr/share/doc/lighttpd/config/modules.conf`. 任何错误配置都可能导致 *lighttpd* 崩溃。
重新加载 lighttpd：
1. systemctl restart lighttpd
**注意:**
* 如果你在访问php文件时遇到诸如 *No input file found* 的错误, 有很多原因可以导致这个错误，请参阅 [this FAQ](http://redmine.lighttpd.net/projects/1/wiki/frequentlyaskedquestions#I-get-the-error-No-input-file-specified-when-trying-to-use-PHP) 。
* 确认没有其他模块 (如 `mod_cgi`) 负责处理php文件。
There is no adaptive spawning anymore in recent lighttpd releases. For dynamic management of PHP processes, you can use [php-fpm](https://www.archlinux.org/packages/?name=php-fpm).
```
```
**Note:** You can configure the number of servers in the pool and tweak other configuration options by editing the file `/etc/php/php-fpm.conf`. More details on *php-fpm* can be found on the [php-fpm website](http://php-fpm.anight.org/). You should also note that when you make changes to /etc/php/php.ini you will need to restart php-fpm
In `/etc/lighttpd/conf.d/fastcgi.conf` add:
```
server.modules += ( "mod_fastcgi" )
index-file.names += ( "index.php" )
fastcgi.server = (
".php" => (
"localhost" => (
"socket" => "/run/php-fpm/php-fpm.sock",
"broken-scriptfilename" => "enable"
))
)
```
Install [eaccelerator](https://aur.archlinux.org/packages/eaccelerator/) from the [AUR](/index.php/AUR "AUR").
Add own config file for eaccelerator:
`/etc/php/conf.d/eaccelerator-own.ini`
```
zlib.output_compression = On
cgi.fix_pathinfo=1
eaccelerator.cache_dir="/home/phpuser/eaccelerator/cache"
```
**Tip:** I additionally set `safe_mod` to `On` in my setup, but this is not required.
Create the following php page, name it index.php, and place a copy in both /srv/http/ and /srv/http-ssl/html/
```
<?php
phpinfo();
?>
```
Try navigating with a web browser to both the http and https address of your server. You should see the phpinfo page.
Check eaccelerator caching:
```
```
If the above command outputs the following:
```
-rw------- 1 phpuser phpuser 456 2005-05-05 14:53 eaccelerator-277.58081
-rw------- 1 phpuser phpuser 452 2005-05-05 14:53 eaccelerator-277.88081
```
Then eaccelerator is happily caching your php scripts to help speed things up.
Install and configure FastCGI. (See [
Install [ruby](/index.php/Ruby "Ruby") from [extra] and [ruby-fcgi](https://aur.archlinux.org/packages/ruby-fcgi/) from [AUR](/index.php/AUR "AUR").
Follow instructions on [RubyOnRails](/index.php/RubyOnRails "RubyOnRails").
Install flup
```
```
Configure:
```
fastcgi.server = (
".py" =>
(
"python-fcgi" =>
(
"socket" => "/run/lighttpd/fastcgi.python.socket",
"bin-path" => "test.py",
"check-local" => "disable",
"max-procs" => 1,
)
)
)
```
Generate an SSL Cert, e.g. like that:
```
```
Edit `/etc/lighttpd/lighttpd.conf`. To make lighttpd SSL-only (you probably need to set the server port to 443 as well)
```
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/certs/www.example.com.pem"
```
To enable SSL in addition to normal HTTP
```
$SERVER["socket"] == ":443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/certs/www.example.com.pem"
}
```
If you want to serve different sites, you can change the document root inside the socket conditional:
```
$SERVER["socket"] == ":443" {
server.document-root = "/srv/ssl"
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/certs/www.example.com.pem"
}
```
or as alternative you can use the scheme conditional to distinguish between secure and normal requests.
```
$HTTP["scheme"] == "https" {
server.document-root = "/srv/ssl"
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/certs/www.example.com.pem"
}
```
Note that you cannot use the scheme conditional around ssl.engine above, since lighttpd needs to know on what port to enable SSL.
To use [SNI](https://en.wikipedia.org/wiki/Server_Name_Indication "wikipedia:Server Name Indication") with lighttpd, simply put additional ssl.pemfile configuration directives inside host conditionals. It seems a default ssl.pemfile is still required, though.
```
$HTTP["host"] == "www.example.org" {
ssl.pemfile = "/etc/lighttpd/certs/www.example.org.pem"
}
```
```
$HTTP["host"] == "mail.example.org" {
ssl.pemfile = "/etc/lighttpd/certs/mail.example.org.pem"
}
```
You should add "mod_redirect" in server.modules array in `/etc/lighttpd/lighttpd.conf`:
```
server.modules = (
...
"mod_redirect",
...
)
```
```
$SERVER["socket"] == ":80" {
$HTTP["host"] =~ "example.org" {
url.redirect = ( "^/(.*)" => "[https://example.org/$1](https://example.org/$1)" )
server.name = "example.org"
}
}
```
```
$SERVER["socket"] == ":443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/ssl/server.pem"
server.document-root = "..."
}
```
To redirect all hosts to their secure equivalents use the following in place of the socket 80 configuration above:
```
$SERVER["socket"] == ":80" {
$HTTP["host"] =~ "(.*)" {
url.redirect = ( "^/(.*)" => "[https://%1/$1](https://%1/$1)" )
}
}
```
To redirect all hosts for part of the site (e.g. secure or phpmyadmin):
```
$SERVER["socket"] == ":80" {
$HTTP["url"] =~ "^/secure" {
url.redirect = ( "^/(.*)" => "[https://example.com/$1](https://example.com/$1)" )
}
}
```
In `/etc/lighttpd/lighttpd.conf` add
```
var.cache_dir = "/var/cache/lighttpd"
```
Then create directory for a compressed files:
```
```
Copy example configuration file:
```
```
Add following in `/etc/lighttpd/lighttpd.conf`:
```
include "conf.d/compress.conf"
```
**Note:** You can not do this (copy compress.conf) and add a needed content in `/etc/lighttpd/lighttpd.conf` instead.
## 疑难解答
### 关于Lighttpd下载.php文件的情况
若Lighttpd仅仅是下载`.php`文件而不是去“初始化”它们，那么你可能没把下面的一些设置写入你的配置文件里`/etc/lighttpd/lighttpd.conf`。
```
server.modules = (
"mod_fastcgi",
)
fastcgi.server = ( ".php" => ((
"bin-path" => "/usr/bin/php-cgi",
"socket" => "/tmp/php.socket",
"max-procs" => 2,
"bin-environment" => (
"PHP_FCGI_CHILDREN" => "16",
"PHP_FCGI_MAX_REQUESTS" => "10000"
),
"bin-copy-environment" => (
"PATH", "SHELL", "USER"
),
"broken-scriptfilename" => "enable"
)))
```
Lighttpd的默认设置是没有包括CSS的媒体类型的，所以标准的浏览器把text/CSS误以为text/html而混淆彼此，最终什么都没有正确的显示出来。要解决这个问题需要在CSS中增加一条说明。
```
mimetype.assign = (
".html" => "text/html",
".txt" => "text/plain",
".jpg" => "image/jpeg",
".png" => "image/png",
".css" => "text/css"
)
```
换行不是必须的，仅仅为了可读性。
* [Lighttpd wiki](http://redmine.lighttpd.net/projects/lighttpd/wiki)