安装 lighttpd 於 FreeBSD
作者：zeissoctopus
以下是我安装和配置 lighttpd 1.4.29 万维网服务器於 FreeBSD 8-Stable 的笔记。我会启动以下几项功能：
SSL
lighttpd 的 simple namebase virtualhost
FastCGI 支援 PHP
1: 安装软件
从 ports 编译安装 lighttpd 入 FreeBSD
% cd /usr/ports/www/lighttpd
% su root
# make install
# make clean
# exit
以下是我用 ports 编译 lighttpd 时所选择的选项
WITHOUT_BZIP2 true
WITHOUT_CML true
WITHOUT_FAM true
WITHOUT_GDBM true
WITH_IPV6 true
WITHOUT_LIBEV true
WITHOUT_MAGNET true
WITHOUT_MEMCACHE true
WITHOUT_MYSQL true
WITHOUT_MYSQLAUTH true
WITHOUT_NODELAY true
WITHOUT_OPENLDAP true
WITH_OPENSSL true
WITHOUT_SPAWNFCGI true
WITHOUT_VALGRIND true
WITHOUT_WEBDAV true
FreeBSD 默认 Httpd 使用者身份是 www:www
2: 安排网站的文件目录
lighttpd 执行时，会产生一些文件。lighttpd 也会找寻网站实际放置的位置。因此需要事先安排妥当。因为我只需要 lighttpd 为一个 domain 服务，所以我只需要依 从 simple virtualhost 规则建立网站的目录结构。然而所有文件位置皆可以自由安排，本例子是依从我个人喜好来决定而已。
lighttpd 执行时产生的文件
lighttpd 的 simple namebase virtualhost 目录安排
除了根目录外，其余皆以 virtual host 网站名称来命名目录
3: 配置 FreeBSD ports 里的 lighttpd
在 FreeBSD 里默认配置文件的位置
有关本例子载入配置文件的次序
本例子会启动 Lighttpd 的 ssl、fastcgi 和 simple_vhost 模块，因此有关配置文件会按以 下次序读入：
/usr/local/etc/lighttpd/lighttpd.conf
/usr/local/etc/lighttpd/modules.conf
/usr/local/etc/lighttpd/conf.d/fastcgi.conf
/usr/local/etc/lighttpd/conf.d/simple_vhost.conf
换言之，本例子只需要适当修改以上4个配置文件。
lighttpd.conf 内容
#######################################################################
##
## /usr/local/etc/lighttpd/lighttpd.conf
##
#######################################################################
#######################################################################
##
## 定义有些有关目录的变量
##
var.log_root = "/var/log/lighttpd"
var.state_dir = "/var/run"
var.home_dir = "/var/spool/lighttpd"
var.conf_dir = "/usr/local/etc/lighttpd"
##
## Virutal Hosts 的根目录
##
## 用于以下模块：
## conf.d/evhost.conf
## conf.d/simple_vhost.conf
## vhosts.d/vhosts.template
##
var.vhosts_dir = "/home/www"
##
## CGI/FastCGI socket 目录
##
## 用于以下模块：
## conf.d/fastcgi.conf
## conf.d/scgi.conf
##
var.socket_dir = "/var/lib/lighttpd/sockets"
##
#######################################################################
#######################################################################
##
## 载入模块定义文件
include "modules.conf"
##
#######################################################################
#######################################################################
##
## Lighttpd 基本设定
## ———————
##
server.port = 80
## 用否 IPv6?
server.use-ipv6 = "disable"
## 缚紧 IP
server.bind = "127.0.0.1"
## Lighttpd 以什么身份执行.
server.username = "www"
server.groupname = "www"
## Server: 回应字串
server.tag = "lighttpd"
## Lighttpd 的 pid 文件
server.pid-file = state_dir + "/lighttpd.pid"
## 默认文件目录
server.document-root = "/home/www/example.org/htdocs/"
##
#######################################################################
#######################################################################
##
## Logging 选项
## ——————
##
server.errorlog = log_root + "/lighttpd-error.log"
##
## Access log config
##
include "conf.d/access_log.conf"
##
## The debug options are moved into their own file.
## see conf.d/debug.conf for various options for request debugging.
##
include "conf.d/debug.conf"
##
#######################################################################
#######################################################################
##
## Tuning/Performance
## ——————–
##
server.event-handler = "freebsd-kqueue"
##
## The basic network interface for all platforms at the syscalls read()
## and write(). Every modern OS provides its own syscall to help network
## servers transfer files as fast as possible
##
## linux-sendfile – is recommended for small files.
## writev – is recommended for sending many large files
##
server.network-backend = "writev"
##
## As lighttpd is a single-threaded server, its main resource limit is
## the number of file descriptors, which is set to 1024 by default (on
## most systems).
##
## If you are running a high-traffic site you might want to increase this
## limit by setting server.max-fds.
##
## Changing this setting requires root permissions on startup. see
## server.username/server.groupname.
##
## By default lighttpd would not change the operation system default.
## But setting it to 2048 is a better default for busy servers.
##
server.max-fds = 2048
##
## Stat() call caching.
##
## lighttpd can utilize FAM/Gamin to cache stat call.
##
## possible values are:
## disable, simple or fam.
##
server.stat-cache-engine = "simple"
##
## Fine tuning for the request handling
##
## max-connections == max-fds/2 (maybe /3)
## means the other file handles are used for fastcgi/files
##
server.max-connections = 1024
##
## How many seconds to keep a keep-alive connection open,
## until we consider it idle.
##
## Default: 5
##
server.max-keep-alive-idle = 5
##
## How many keep-alive requests until closing the connection.
##
## Default: 16
##
server.max-keep-alive-requests = 16
##
## Maximum size of a request in kilobytes.
## By default it is unlimited (0).
##
## Uploads to your server cant be larger than this value.
##
server.max-request-size = 0
##
## Time to read from a socket before we consider it idle.
##
## Default: 60
##
server.max-read-idle = 60
##
## Time to write to a socket before we consider it idle.
##
## Default: 360
##
server.max-write-idle = 360
##
## Traffic Shaping
## —————–
##
## see /usr/share/doc/lighttpd/traffic-shaping.txt
##
## Values are in kilobyte per second.
##
## Keep in mind that a limit below 32kB/s might actually limit the
## traffic to 32kB/s. This is caused by the size of the TCP send
## buffer.
##
## per server:
##
server.kbytes-per-second = 128
##
## per connection:
##
connection.kbytes-per-second = 32
##
#######################################################################
#######################################################################
##
## Filename/File handling
## ————————
##
## files to check for if …/ is requested
## index-file.names = ( "index.php", "index.rb", "index.html",
## "index.htm", "default.htm" )
##
index-file.names += (
"index.xhtml", "index.html", "index.htm", "index.php"
)
##
## deny access the file-extensions
##
## ~ is for backupfiles from vi, emacs, joe, …
## .inc is often used for code includes which should in general not be part
## of the document-root
url.access-deny = ( "~", ".inc" )
##
## disable range requests for pdf files
## workaround for a bug in the Acrobat Reader plugin.
##
$HTTP["url"] =~ "\.pdf$" {
server.range-requests = "disable"
}
##
## which extensions should not be handle via static-file transfer
##
## .php, .pl, .fcgi are most often handled by mod_fastcgi or mod_cgi
##
static-file.exclude-extensions = ( ".php", ".php5", ".pl", ".fcgi", ".scgi" )
##
## mimetype mapping
##
include "conf.d/mime.conf"
##
## directory listing configuration
##
include "conf.d/dirlisting.conf"
##
## Should lighttpd follow symlinks?
##
server.follow-symlink = "disable"
##
## force all filenames to be lowercase?
##
server.force-lowercase-filenames = "disable"
##
## defaults to /var/tmp as we assume it is a local harddisk
##
server.upload-dirs = ( "/var/tmp" )
##
#######################################################################
#######################################################################
##
## SSL Settings
##
$SERVER["socket"] == ":443" {
ssl.engine = "enable"
ssl.pemfile = "/usr/local/etc/ssl/crt/YourHost.pem"
ssl.use-sslv3 = "enable"
ssl.cipher-list = "TLSv1+HIGH:SSLv3+HIGH:!aNULL:!eNULL:!3DES:@STRENGTH"
}
##
#######################################################################
#######################################################################
##
## Simple virtual host
##
$HTTP["host"] != "wiki.example.org" {
accesslog.filename = log_root + "/example.org-access.log"
}
$HTTP["host"] == "wiki.example.org" {
accesslog.filename = log_root + "/wiki.example.org-access.log"
}
modules.conf 内容
#######################################################################
##
## Modules to load
## —————–
##
## at least mod_access and mod_accesslog should be loaded
## all other module should only be loaded if really neccesary
##
## – saves some time
## – saves memory
##
## the default module set contains:
##
## "mod_indexfile", "mod_dirlisting", "mod_staticfile"
##
## you dont have to include those modules in your list
##
## Modules, which are pulled in via conf.d/*.conf
##
## NOTE: the order of modules is important.
##
## – mod_accesslog -> conf.d/access_log.conf
## – mod_compress -> conf.d/compress.conf
## – mod_status -> conf.d/status.conf
## – mod_webdav -> conf.d/webdav.conf
## – mod_cml -> conf.d/cml.conf
## – mod_evhost -> conf.d/evhost.conf
## – mod_simple_vhost -> conf.d/simple_vhost.conf
## – mod_mysql_vhost -> conf.d/mysql_vhost.conf
## – mod_trigger_b4_dl -> conf.d/trigger_b4_dl.conf
## – mod_userdir -> conf.d/userdir.conf
## – mod_rrdtool -> conf.d/rrdtool.conf
## – mod_ssi -> conf.d/ssi.conf
## – mod_cgi -> conf.d/cgi.conf
## – mod_scgi -> conf.d/scgi.conf
## – mod_fastcgi -> conf.d/fastcgi.conf
## – mod_proxy -> conf.d/proxy.conf
## – mod_secdownload -> conf.d/secdownload.conf
## – mod_expire -> conf.d/expire.conf
##
server.modules = (
"mod_access",
"mod_alias",
"mod_auth",
# "mod_evasive",
"mod_redirect",
"mod_rewrite",
"mod_setenv",
# "mod_usertrack",
)
##
#######################################################################
#######################################################################
##
## Config for various Modules
##
##
## mod_ssi
##
#include "conf.d/ssi.conf"
##
## mod_status
##
#include "conf.d/status.conf"
##
## mod_webdav
##
#include "conf.d/webdav.conf"
##
## mod_compress
##
#include "conf.d/compress.conf"
##
## mod_userdir
##
#include "conf.d/userdir.conf"
##
## mod_magnet
##
#include "conf.d/magnet.conf"
##
## mod_cml
##
#include "conf.d/cml.conf"
##
## mod_rrdtool
##
#include "conf.d/rrdtool.conf"
##
## mod_proxy
##
#include "conf.d/proxy.conf"
##
## mod_expire
##
#include "conf.d/expire.conf"
##
## mod_secdownload
##
#include "conf.d/secdownload.conf"
##
#######################################################################
#######################################################################
##
## CGI modules
##
##
## SCGI (mod_scgi)
##
#include "conf.d/scgi.conf"
##
## FastCGI (mod_fastcgi)
##
include "conf.d/fastcgi.conf"
##
## plain old CGI (mod_cgi)
##
#include "conf.d/cgi.conf"
##
#######################################################################
#######################################################################
##
## VHost Modules
##
## Only load ONE of them!
## ========================
##
##
## You can use conditionals for vhosts aswell.
##
## see http://www.lighttpd.net/documentation/configuration.html
##
##
## mod_evhost
##
#include "conf.d/evhost.conf"
##
## mod_simple_vhost
##
include "conf.d/simple_vhost.conf"
##
## mod_mysql_vhost
##
#include "conf.d/mysql_vhost.conf"
##
#######################################################################
fastcgi.conf 内容
以下 fastcgi.conf 仅支援 PHP5，并以 socket 方式来连接 Lighttpd 和 FastCGI Daemon，在 FreeBSD 里，php-cgi 是放在 /usr/local/bin 目录。
#######################################################################
##
## FastCGI Module
## —————
##
## http://www.lighttpd.net/documentation/fastcgi.html
##
server.modules += ( "mod_fastcgi" )
##
## PHP Example
## For PHP don’t forget to set cgi.fix_pathinfo = 1 in the php.ini.
##
## The number of php processes you will get can be easily calculated:
##
## num-procs = max-procs * ( 1 + PHP_FCGI_CHILDREN )
##
## for the php-num-procs example it means you will get 17*5 = 85 php
## processes. you always should need this high number for your very
## busy sites. And if you have a lot of RAM. 🙂
##
fastcgi.server = ( ".php" =>
( "php-local" =>
(
"socket" => socket_dir + "/php-fcgi.socket",
"bin-path" => "/usr/local/bin/php-cgi",
"bin-environment" => (
"PHP_FCGI_CHILDREN" => "8",
"PHP_FCGI_MAX_REQUESTS" => "10000",
),
"max-procs" => 1,
"broken-scriptfilename" => "enable",
)
),
)
simple_vhost.conf 内容
simple_vhost.conf
#######################################################################
##
## Simple Virtual hosting
## ————————
##
## http://www.lighttpd.net/documentation/simple-vhost.html
##
server.modules += ( "mod_simple_vhost" )
## If you want name-based virtual hosting add the next three settings and load
## mod_simple_vhost
##
## document-root =
## virtual-server-root + virtual-server-default-host + virtual-server-docroot
## or
## virtual-server-root + http-host + virtual-server-docroot
##
simple-vhost.server-root = vhosts_dir + "/"
simple-vhost.default-host = "example.org"
simple-vhost.document-root = "htdocs"
##
## Print some errors for finding the document-root
##
#simple-vhost.debug = "enable"
##
#######################################################################
4: 启动 Lighttpd 服务
请在 /etc/rc.conf 加入以下一行。那么每次重启 FreeBSD 皆会自动启动 Lighttpd
lighttpd_enable="YES"
不想重启 FreeBSB，立即启动 Lighttpd 的话，按上面修改 /etc/rc.conf 后输入以下命令便可。
% su –
# service lighttpd start
# exit