Openwrt 路由设置（三）：使用Lighttpd作Web服务器

$ opkg install lighttpd luci-mod-admin-full libiwinfo
$ opkg install lighttpd-mod-cgi lighttpd-mod-alias lighttpd-mod-openssl
$ opkg install lighttpd-mod-webdav lighttpd-mod-auth lighttpd-mod-authn_file
$ opkg install lighttpd-mod-accesslog lighttpd-mod-redirect

server.modules += ("mod_redirect")
server.modules += ("mod_openssl")
$SERVER["socket"] == ":443" {
    ssl.engine  = "enable"
    ssl.privkey = "/path/to/private_key"
    ssl.pemfile = "/path/to/signed_cert_followed_by_intermediates"
} else $HTTP["scheme"] == "http" {
  $HTTP["host"] !~ "^(192\.168\.|127\.0\.0\.1|localhost)" {
    $HTTP["host"] =~ "(.*)(\:[0-9]*)?$" {  ## %1 hostname without port
      url.redirect = (".*" => "https://%1$0")
    }
  }
}

server.document-root  = "/www/"    # 设置web的根目录。/www/为openwrt默认
server.upload-dirs    = ( "/tmp" )
# server.username  = "http"      # openwrt必须用root，不设置
# server.groupname = "www-data"  # openwrt必须用root，不设置
index-file.names      = ( "index.php", "index.html",
                          "index.htm", "default.htm",
                        )
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )

server.pid-file             := "/var/run/lighttpd.pid"
server.errorlog             := "/var/log/lighttpd/error.log"
server.errorlog-use-syslog  := "enable"
server.modules              += ( "mod_accesslog" )
accesslog.filename          := "/var/log/lighttpd/access.log"

include "/etc/lighttpd/mime.conf"
include "/etc/lighttpd/conf.d/*.conf"

server.modules += ( "mod_cgi" )
static-file.exclude-extensions += ( ".lua" )

cgi.assign = ( ".pl"  => "/usr/bin/perl",
               ".cgi" => "/usr/bin/perl",
               ".rb"  => "/usr/bin/ruby",
               ".erb" => "/usr/bin/eruby",
               ".py"  => "/usr/bin/python",
               ".lua" => "/usr/bin/lua",
               "/cgi-bin/luci" => "",
               "/cgi-bin/cgi-backup" => "",
               "/cgi-bin/cgi-download" => "",
               "/cgi-bin/cgi-exec" => "",
               "/cgi-bin/cgi-upload" => "",
              )
$HTTP["url"] =~ "^/cgi-bin" {
    cgi.assign += ( "" => "" )
}

##  Authentication Module
server.modules += ( "mod_auth" )
auth.debug = 2
auth.cache = ("max-age" => "180")    # 3分钟内使用缓存的授权

##  WebDAV Module
##  Override the /dav/ folder configured in 30-webdav.conf
server.modules += ( "mod_webdav" )

$HTTP["url"] =~ "^/dav($|/)" {    # 如果注释掉，用于将整个webroot目录共享

  webdav.activate       = "enable"
# webdav.is-readonly    = "enable"    # 只读
  server.document-root  = "/mnt/mmcblk0p4/"    # /dav文件夹是在其中的
  server.dir-listing    = "enable"    # 可以通过浏览器访问
  dir-listing.encoding  = "utf-8"

  auth.backend                 = "plain"    # 明文密码
  auth.backend.plain.userfile  = "/etc/lighttpd/webdav.shadow" # 存密码的文件
  auth.require = (
      ""=>("method"=>"basic","realm"=>"webdav","require"=>"valid-user")
  )
# auth.require = (
#     "/dav/home/user1/"=>("method"=>"basic","realm"=>"webdav","require"=>"user=user1"),
#     "/dav/home/user2/"=>("method"=>"basic","realm"=>"webdav","require"=>"user=user2"),
#     "/dav/"=>("method"=>"basic","realm"=>"webdav","require"=>"user=admin|user=sync")
# )

  # 为防止上传文件冲突，用sqlite db文件作锁。
  webdav.sqlite-db-name = "/tmp/webdav.db"
  # 放在/tmp里，在内存里，频繁读写减少对硬盘的损耗。
}

admin1:password1
admin2:password2

$ /etc/init.d/uhttpd stop
$ /etc/init.d/uhttpd disable
$ /etc/init.d/lighttpd enable
$ /etc/init.d/lighttpd start