#lighttpd — Public Fediverse posts

Looking for a fast, low-resource web server for your CMS? Learn how to install Joomla 5.x on Ubuntu 24.04 using Lighttpd! This guide covers setting up Lighttpd, MariaDB, and deploying Joomla.

#Joomla #Lighttpd #Ubuntu #CMS #OpenSource
https://geekrewind.com/install-joomla-with-lighttpd-on-ubuntu-24-04/

I love #lighttpd !

This web server is very lightweight and always do the job.

There is a new version with bug fixes

https://www.lighttpd.net/2026/07/08/1.4.85/

you can donate if you want

Had a good evening with music and chat via the Doof, pottering around with some CI builds and container hosting, and fixing @bright_helpings 's laptop which had run out of disk space for some reason.

Finally have a live Django app using gunicorn for the app code and a separate lighttpd container for the static assets.

#gunicorn #django #lighttpd #docker #cicd

Oof, the most popular #lighttpd container on Docker Hub with >10 million downloads is 4 years old, running v1.4.64.

This means it's vulnerable to https://app.opencve.io/cve/CVE-2025-12642 with a CVE score of 9.1 (critical).

I just set up a quick CI job based off that popular container which doesn't pin to a specific version and rebuilds every week. Should look at publishing it too... and maybe doing some automated static security testing on it.

@AndiBarth when I did the setup for my small virtual server, I decided for #lighttpd, mainly because it's called light and supposedly it is; php seems to work just as well as with apache, but most of my content is static files. I have no complaints but I'm really just a casual user/admin, so probably wouldn't notice many things. https://en.wikipedia.org/wiki/Lighttpd notes: No HTTP/3 support.
I have too little experience to say use it instead of apache, just wanted to mention it.

NetBSD: вторая жизнь Nintendo Wii. Как и зачем я установил эту ОС на игровую консоль

Привет, Хабр! Мое плотное знакомство с консолями Nintendo началось с Wii U. Так уж получилось, что лучшей серией слешеров я считаю Bayonetta. А поскольку вторая часть вышла как эксклюзив для Wii U, мне пришлось приобрести приставку. Потом заодно познакомился с The Legend of Zelda — и понеслось. Примерно то же самое случилось и с выходом Bayonetta 3 — обзавелся Nintendo Switch. Что самое интересное, у меня никогда не было обычной Wii. Волей случая мне в руки попался замечательный экземпляр, но на него я решил посмотреть с точки зрения железа. Внутри меня ждал любопытный конфиг из PowerPC процессора IBM Broadway + SoC производства ATI, который отвечает за графику, а также устройств ввода-вывода.

https://habr.com/ru/companies/ru_mts/articles/984492/

#NetBSD #софт #гаджеты #Nintendo_Wii #Homebrew #ретрожелезо #PowerPC_750CL #lighttpd #bsdfetch

Well, it seems like I needed a refresher on linux directory perms (esp regarding parent dir perms with respect to listing and traversal) to successfully configure my webserver like I wanted. I've lost hours on this though.

I first did a lot of tests to identify possible causes to the problem, which in turn led me to this SO link : https://unix.stackexchange.com/questions/13858/do-the-parent-directorys-permissions-matter-when-accessing-a-subdirectory

Everything is fine now. Funny how with *nix systems it all comes down to the basics 😁

#linux #webserver #lighttpd

#lighttpd 1.4.80 has been released (#http / #https / #httpd / #Web / #Webserver) https://lighttpd.net/

Serving a simple website from a Jail with Bastille

In this short little howto we will be setting up a simple Jail via Bastille and host a static website.

Beware: The article assumes that sudo is configured. You can of course also use doas or switch to root, if you so desire. Some commands need root rights to work – keep that in mind as you go along!

First, we need to install Bastille itself.

$ sudo pkg install -y bastille

After installing, we enable the bastille service.

$ sudo sysrc bastille_enable=YES

And finally we start it.

$ sudo […]

https://journal.bsd.cafe/2025/08/13/serving-a-simple-website-from-a-jail-with-bastille/

Doing some yak shaving today. I am trying to run a #lighttpd container alongside #gunicorn to serve up a #Django app with static resources, but there's no official build on Dockerhub and mostly the community ones are out of date.

So I'm setting up my own CI project to rebuild a fresh lighttpd container weekly which I can then use as a base for my web app...

Оказывается lighttpd просто настраивается.
Достаточно конфига:

server.document-root = "/var/www/"
server.port = 80

index-file.names = ( "index.html" )
dir-listing.activate = "enable"

server.modules += ( "mod_cgi" )
$HTTP["url"] =~ "^/cgi-bin/" { cgi.assign = ( "" => "" ) }

И можно отдавать статику и запускать простые скрипты на bash.

Теперь понятно почему lighttpd является сильным конкурентом nginx.

#web #webdev #lighttpd #nginx

Note to self ... reload lighttpd when you make a new letsencrypt cert or else you'll start muttering oaths at the computer gods and get all irritable.

#server #lighttpd #letsencrypt

@[email protected] I feel like a move from #lighttpd to #nginx is in order for @[email protected] lol. Maybe even putting it behind a CDN too (though preferably not Cloudflare of course), since latency really matters for spotty internet connections (like being in mobile data for example)

@[email protected] @[email protected]

@markusr ich hab gerade nachgeschaut, #lighttpd hatte sowas auch: CVE-2018-19052, ist schon seit geraumer Zeit gefixt.
Aber fieserweise war vorher die Doku so, dass man es genau schlecht schreiben sollte: https://redmine.lighttpd.net/projects/lighttpd/wiki/Mod_alias/diff?utf8=%E2%9C%93&version=16&version_from=15&commit=Unterschiede+anzeigen (die vorher vertretene Logik "das willst du nicht" ist schwach, das andere will ich auch nicht)

It feels good to be a gangsta. #freebsd #lighttpd

Hackable #Intel and #Lenovo hardware that went undetected for 5 years won’t ever be fixed
For years, #BMC from multiple manufacturers have incorporated vulnerable versions of #opensource software known as #lighttpd. In 2018, lighttpd developers released a new version that fixed “various use-after-free scenarios,” but didn’t include a #CVE vulnerability tracking number as is customary. BMC makers including #AMI and #ATEN were using affected versions of this software.
https://arstechnica.com/security/2024/04/supply-chain-snafu-causes-intel-and-others-to-ship-hackable-hardware-for-5-years/

#Intel and #Lenovo servers impacted by 6-year-old #BMC flaw
During recent scans of Baseboard Management Controllers, Binarly firmware security firm discovered a remotely exploitable heap out-of-bounds read vulnerability through the #Lighttpd web server processing "folded" HTTP request headers.
It was addressed in August 2018, the maintainers of Lighthttpd patched it silently in version 1.4.51 but #AMI #MegaRAC BMC to missed the fix, possibly because no #CVE was assigned.
https://www.bleepingcomputer.com/news/security/intel-and-lenovo-servers-impacted-by-6-year-old-bmc-flaw/

Been following further the rabbit hole of setting up simple things for small scale networks. This time tackling file sharing on LAN with WebDAV.

https://things.bleu255.com/runyourown/Simple_LAN_filesharing_with_WebDAV

🧵 2/?

#lighttpd #web #dav #webdav #filesharing

@xylophilist Nginx is so fast, it's amazing

I never actually learned Apache in the first place 'cause I took one look at how slow it is and said nope lol

I've used #lighttpd before too, and I'm currently trying #caddy as my main reverse proxy / web server

Don’t try this at home, but #lighttpd makes it real easy to create lightweight http-endpoints for shell scripts:

index-file.names = ( "index.sh" )
server.modules += ( "mod_cgi" )
cgi.assign = (".sh" => "/bin/sh")

(.conf) off you go

#linux #http #shell