# Sample lighttpd configuration file for phpBB.
# Global settings have been removed, copy them
# from your system's lighttpd.conf.
# Tested with lighttpd 1.4.35

# If you want to use the X-Sendfile feature,
# uncomment the 'allow-x-send-file' for the fastcgi
# server below and add the following to your config.php
#
#  define('PHPBB_ENABLE_X_SENDFILE', true);
#
# See http://blog.lighttpd.net/articles/2006/07/02/x-sendfile
# for the details on X-Sendfile.

# Load moules
server.modules += ( 
	"mod_access",
	"mod_fastcgi",
	"mod_rewrite",
	"mod_accesslog"
)

# If you have domains with and without www prefix,
# redirect one to the other.
$HTTP["host"] =~ "^(myforums\.com)$" {
	url.redirect = (
		".*"	=> "http://www.%1$0"
	)
}

$HTTP["host"] == "www.myforums.com" {
	server.name				= "www.myforums.com"
	server.document-root	= "/path/to/phpbb"
	server.dir-listing		= "disable"
	
	index-file.names		= ( "index.php", "index.htm", "index.html" )
	accesslog.filename		= "/var/log/lighttpd/access-www.myforums.com.log"
	
	# Deny access to internal phpbb files.	
	$HTTP["url"] =~ "^/(config\.php|common\.php|cache|files|images/avatars/upload|includes|phpbb|store|vendor)" {
		url.access-deny = ( "" )
	}

	# Deny access to version control system directories.
	$HTTP["url"] =~ "/\.svn|/\.git" {
		url.access-deny = ( "" )
	}
	
	# Deny access to apache configuration files.
	$HTTP["url"] =~ "/\.htaccess|/\.htpasswd|/\.htgroups" {
		url.access-deny = ( "" )
	}
	
	# The following 3 lines will rewrite URLs passed through the front controller
	# to not require app.php in the actual URL. In other words, a controller is
	# by default accessed at /app.php/my/controller, but can also be accessed at
	# /my/controller
	url.rewrite-if-not-file = (
	   "^/(.*)$" => "/app.php/$1"
	)
	
	fastcgi.server = ( ".php" => 
		((
			"bin-path" => "/usr/bin/php-cgi",
			"socket" => "/tmp/php.socket",
			"max-procs" => 4,
			"idle-timeout" => 30,
			"bin-environment" => ( 
				"PHP_FCGI_CHILDREN" => "10",
				"PHP_FCGI_MAX_REQUESTS" => "10000"
			),
			"bin-copy-environment" => (
				"PATH", "SHELL", "USER"
			),
			#"allow-x-send-file" => "enable",
			"broken-scriptfilename" => "enable"
		))
	)
}
