network/lighttpd: Updated for version 1.4.77.

Signed-off-by: Matteo Bernardini <ponce@slackbuilds.org>

Signed-off-by: Willy Sudiarto Raharjo <willysr@slackbuilds.org>

5 files changed, 473 insertions, 455 deletions

diff --git a/network/lighttpd/conf/lighttpd.annotated.conf b/network/lighttpd/conf/lighttpd.annotated.conf
new file mode 100644
index 0000000000..a146eb36c8
--- /dev/null
+++ b/network/lighttpd/conf/lighttpd.annotated.conf
@@ -0,0 +1,436 @@
+#######################################################################
+##
+## included by /etc/lighttpd/lighttpd.conf
+##
+## check /etc/lighttpd/conf.d/*.conf for the configuration of modules.
+##
+#######################################################################
+
+#######################################################################
+##
+## Some Variable definition which will make chrooting easier.
+##
+## if you add a variable here. Add the corresponding variable in the
+## chroot example as well.
+##
+var.log_root    = "/var/log/lighttpd"
+var.server_root = "/srv/www"
+var.state_dir   = "/run"
+var.home_dir    = "/var/lib/lighttpd"
+var.conf_dir    = "/etc/lighttpd"
+
+##
+## run the server chrooted.
+##
+## This requires root permissions during startup.
+##
+## If you run chroot'ed, set the variables to directories relative to
+## the chroot dir.
+##
+## example chroot configuration:
+##
+#var.log_root    = "/logs"
+#var.server_root = "/"
+#var.state_dir   = "/run"
+#var.home_dir    = "/lib/lighttpd"
+#var.vhosts_dir  = "/vhosts"
+#var.conf_dir    = "/etc"
+#
+#server.chroot   = "/srv/www"
+
+##
+## Some additional variables to make the configuration easier
+##
+
+##
+## Base directory for all virtual hosts
+##
+## used in:
+## conf.d/evhost.conf
+## conf.d/simple_vhost.conf
+## vhosts.d/vhosts.template
+##
+var.vhosts_dir  = server_root + "/vhosts"
+
+##
+## Cache for mod_deflate
+##
+## used in:
+## conf.d/deflate.conf
+##
+var.cache_dir   = "/var/cache/lighttpd"
+
+##
+## Base directory for sockets.
+##
+## used in:
+## conf.d/fastcgi.conf
+## conf.d/scgi.conf
+##
+var.socket_dir  = home_dir + "/sockets"
+
+##
+#######################################################################
+
+#######################################################################
+##
+## Load the modules.
+include conf_dir + "/modules.conf"
+
+##
+#######################################################################
+
+#######################################################################
+##
+##  Basic Configuration
+## ---------------------
+##
+#server.port = 80
+
+##
+## bind to a specific IP
+## (default: "*" for all local IPv4 interfaces)
+##
+#server.bind = "localhost"
+
+##
+## Run as a different username/groupname.
+## This requires root permissions during startup.
+##
+server.username  = "@USER@"
+server.groupname = "@GROUP@"
+
+##
+## Enable lighttpd to serve requests on sockets received from systemd
+## https://www.freedesktop.org/software/systemd/man/systemd.socket.html
+##
+#server.systemd-socket-activation = "enable"
+
+##
+## enable core files.
+##
+#server.core-files = "disable"
+
+##
+## Document root
+##
+server.document-root = server_root + "/htdocs"
+
+##
+## The value for the "Server:" response field.
+##
+## It would be nice to keep it at "lighttpd".
+##
+#server.tag = "lighttpd"
+
+##
+## store a pid file
+##
+server.pid-file = state_dir + "/lighttpd.pid"
+
+##
+#######################################################################
+
+#######################################################################
+##
+##  Logging Options
+## ------------------
+##
+## all logging options can be overwritten per vhost.
+##
+## Path to the error log file
+##
+server.errorlog             = log_root + "/error.log"
+
+##
+## If you want to log to syslog you have to unset the
+## server.errorlog setting and uncomment the next line.
+##
+#server.errorlog-use-syslog = "enable"
+
+##
+## Access log config
+##
+include conf_dir + "/conf.d/access_log.conf"
+
+##
+## The debug options are moved into their own file.
+## see conf.d/debug.conf for various options for request debugging.
+##
+include conf_dir + "/conf.d/debug.conf"
+
+##
+#######################################################################
+
+#######################################################################
+##
+##  Tuning/Performance
+## --------------------
+##
+## corresponding documentation:
+## https://wiki.lighttpd.net/Docs_Performance
+##
+## set the event-handler (read the performance section in the manual)
+##
+## The recommended server.event-handler is chosen by default for each OS.
+##
+## epoll  (recommended on Linux)
+## kqueue (recommended on *BSD and MacOS X)
+## solaris-eventports (recommended on Solaris)
+## poll   (recommended if none of above are available)
+## select (*not* recommended)
+##
+#server.event-handler = "epoll"
+
+##
+## The basic network interface for all platforms at the syscalls read()
+## and write(). Every modern OS provides its own syscall to help network
+## servers transfer files as fast as possible
+##
+#server.network-backend = "sendfile"
+
+##
+## As lighttpd is a single-threaded server, its main resource limit is
+## the number of file descriptors, which is set to 1024 by default (on
+## most systems).
+##
+## If you are running a high-traffic site you might want to increase this
+## limit by setting server.max-fds.
+##
+## Changing this setting requires root permissions on startup. see
+## server.username/server.groupname.
+##
+## By default lighttpd would not change the operation system default.
+## But setting it to 16384 is a better default for busy servers.
+##
+## With SELinux enabled, this is denied by default and needs to be allowed
+## by running the following once: setsebool -P httpd_setrlimit on
+##
+server.max-fds = 16384
+
+##
+## listen-backlog is the size of the listen() backlog queue requested when
+## the lighttpd server ask the kernel to listen() on the provided network
+## address.  Clients attempting to connect() to the server enter the listen()
+## backlog queue and wait for the lighttpd server to accept() the connection.
+##
+## The out-of-box default on many operating systems is 128 and is identified
+## as SOMAXCONN.  This can be tuned on many operating systems.  (On Linux,
+## cat /proc/sys/net/core/somaxconn)  Requesting a size larger than operating
+## system limit will be silently reduced to the limit by the operating system.
+##
+## When there are too many connection attempts waiting for the server to
+## accept() new connections, the listen backlog queue fills and the kernel
+## rejects additional connection attempts.  This can be useful as an
+## indication to an upstream load balancer that the server is busy, and
+## possibly overloaded.  In that case, configure a smaller limit for
+## server.listen-backlog.  On the other hand, configure a larger limit to be
+## able to handle bursts of new connections, but only do so up to an amount
+## that the server can keep up with responding in a reasonable amount of
+## time.  Otherwise, clients may abandon the connection attempts and the
+## server will waste resources servicing abandoned connections.
+##
+## It is best to leave this setting at its default unless you have modelled
+## your traffic and tested that changing this benefits your traffic patterns.
+##
+## Default: 1024
+##
+#server.listen-backlog = 128
+
+##
+## Stat() call caching.
+##
+## lighttpd can utilize FAM/Gamin to cache stat call.
+##
+## possible values are:
+## disable, simple, inotify, kqueue, or fam.
+##
+#server.stat-cache-engine = "simple"
+
+##
+## Fine tuning for the request handling
+##
+## max-connections == max-fds/3
+## (other file handles are used for fastcgi/files)
+##
+#server.max-connections = 1024
+
+##
+## How many seconds to keep a keep-alive connection open,
+## until we consider it idle.
+##
+## Default: 5
+##
+#server.max-keep-alive-idle = 5
+
+##
+## How many keep-alive requests until closing the connection.
+##
+## Default: 16
+##
+#server.max-keep-alive-requests = 16
+
+##
+## Maximum size of a request in kilobytes.
+## By default it is unlimited (0).
+##
+## Uploads to your server cant be larger than this value.
+##
+#server.max-request-size = 0
+
+##
+## Time to read from a socket before we consider it idle.
+##
+## Default: 60
+##
+#server.max-read-idle = 60
+
+##
+## Time to write to a socket before we consider it idle.
+##
+## Default: 360
+##
+#server.max-write-idle = 360
+
+##
+##  Traffic Shaping
+## -----------------
+##
+## see /usr/share/doc/lighttpd/traffic-shaping.txt
+##
+## Values are in kilobytes per second.
+##
+## Keep in mind that a limit below 32kB/s might actually limit the
+## traffic to 32kB/s. This is caused by the size of the TCP send
+## buffer.
+##
+## per server:
+##
+#server.kbytes-per-second = 128
+
+##
+## per connection:
+##
+#connection.kbytes-per-second = 32
+
+##
+#######################################################################
+
+#######################################################################
+##
+##  Filename/File handling
+## ------------------------
+
+##
+## files to check for if .../ is requested
+## index-file.names            = ( "index.php", "index.rb", "index.html",
+##                                 "index.htm", "default.htm" )
+##
+index-file.names += (
+  "index.xhtml", "index.html", "index.htm", "default.htm", "index.php"
+)
+
+##
+## deny access the file-extensions
+##
+## ~    is for backupfiles from vi, emacs, joe, ...
+## .inc is often used for code includes which should in general not be part
+##      of the document-root
+url.access-deny             = ( "~", ".inc" )
+
+##
+## url handling modules (rewrite, redirect)
+##
+#url.rewrite                = ( "^/$"             => "/server-status" )
+#url.redirect               = ( "^/wishlist/(.+)" => "http://www.example.com/$1" )
+
+##
+## both rewrite/redirect support back reference to regex conditional using %n
+##
+#$HTTP["host"] =~ "^www\.(.*)" {
+#  url.redirect            = ( "^/(.*)" => "http://%1/$1" )
+#}
+
+##
+## which extensions should not be handled via static-file transfer
+##
+## .php, .pl, .fcgi are most often handled by mod_fastcgi or mod_cgi
+##
+static-file.exclude-extensions = ( ".php", ".pl", ".fcgi", ".scgi" )
+
+##
+## error-handler for all status 400-599
+##
+#server.error-handler       = "/error-handler.html"
+#server.error-handler       = "/error-handler.php"
+
+##
+## error-handler for status 404
+##
+#server.error-handler-404   = "/error-handler.html"
+#server.error-handler-404   = "/error-handler.php"
+
+##
+## Format: <errorfile-prefix><status-code>.html
+## -> ..../status-404.html for 'File not found'
+##
+#server.errorfile-prefix    = server_root + "/htdocs/errors/status-"
+
+##
+## mimetype mapping
+##
+include conf_dir + "/conf.d/mime.conf"
+
+##
+## directory listing configuration
+##
+include conf_dir + "/conf.d/dirlisting.conf"
+
+##
+## defaults to /var/tmp as we assume it is a local harddisk
+## default: "/var/tmp"
+#server.upload-dirs = ( "/var/tmp" )
+
+##
+#######################################################################
+
+#######################################################################
+##
+##  SSL Support
+## -------------
+##
+## https://wiki.lighttpd.net/Docs_SSL
+#
+## To enable SSL for the whole server you have to provide a valid
+## certificate and have to enable the SSL engine.::
+##
+##   server.modules += ( "mod_openssl" )
+##
+##   ssl.privkey = "/path/to/privkey.pem"
+##   ssl.pemfile = "/path/to/fullchain.pem"
+##   # ssl.pemfile should contain the sorted certificate chain, including
+##   # intermediate certificates, as provided by the certificate issuer.
+##   # If both privkey and cert are in same file, specify only ssl.pemfile.
+##
+##   # lighttpd TLS defaults are strict and compatible with modern clients.
+##   # If your organization requires use of system-managed TLS defaults to
+##   # override lighttpd TLS defaults, use "CipherString" => "PROFILE=SYSTEM"
+##   #ssl.openssl.ssl-conf-cmd += ("CipherString" => "PROFILE=SYSTEM")
+##
+##   $SERVER["socket"] == "*:443" {
+##     ssl.engine  = "enable"
+##   }
+##   $SERVER["socket"] == "[::]:443" {
+##     ssl.engine  = "enable"
+##   }
+##
+#######################################################################
+
+#######################################################################
+##
+## custom includes like vhosts.
+##
+#include conf_dir + "/conf.d/config.conf"
+#include conf_dir + "/vhosts.d/*.conf"
+##
+#######################################################################
diff --git a/network/lighttpd/conf/lighttpd.conf b/network/lighttpd/conf/lighttpd.conf
index e54b720aa8..e2920e65e1 100644
--- a/network/lighttpd/conf/lighttpd.conf
+++ b/network/lighttpd/conf/lighttpd.conf
@@ -1,458 +1,42 @@
 #######################################################################
 ##
-## /etc/lighttpd/lighttpd.conf
+## /etc/lighttpd/lighttpd.conf is the entry point for lighttpd configuration.
+## This file may include others using 'include' or 'include_shell'.
 ##
-## check /etc/lighttpd/conf.d/*.conf for the configuration of modules.
+## Print configuration: lighttpd -f /etc/lighttpd/lighttpd.conf -p
+## Check configuration: lighttpd -f /etc/lighttpd/lighttpd.conf -tt
 ##
-#######################################################################
-
-#######################################################################
-##
-## Some Variable definition which will make chrooting easier.
-##
-## if you add a variable here. Add the corresponding variable in the
-## chroot example as well.
-##
-var.log_root    = "/var/log/lighttpd"
-var.server_root = "/srv/www"
-var.state_dir   = "/run/lighttpd"
-var.home_dir    = "/var/lib/lighttpd"
-var.conf_dir    = "/etc/lighttpd"
-
-## 
-## run the server chrooted.
-## 
-## This requires root permissions during startup.
-##
-## If you run chroot'ed, set the variables to directories relative to
-## the chroot dir.
-##
-## example chroot configuration:
-## 
-#var.log_root    = "/logs"
-#var.server_root = "/"
-#var.state_dir   = "/run"
-#var.home_dir    = "/lib/lighttpd"
-#var.vhosts_dir  = "/vhosts"
-#var.conf_dir    = "/etc"
-#
-#server.chroot   = "/srv/www"
-
-##
-## Some additional variables to make the configuration easier
-##
-
-##
-## Base directory for all virtual hosts
-##
-## used in:
-## conf.d/evhost.conf
-## conf.d/simple_vhost.conf
-## vhosts.d/vhosts.template
-##
-var.vhosts_dir  = server_root + "/vhosts"
-
-##
-## Cache for mod_deflate
-##
-## used in:
-## conf.d/deflate.conf
-##
-var.cache_dir   = "/var/cache/lighttpd"
-
-##
-## Base directory for sockets.
-##
-## used in:
-## conf.d/fastcgi.conf
-## conf.d/scgi.conf
-##
-var.socket_dir  = home_dir + "/sockets"
-
-##
-#######################################################################
-
-#######################################################################
-##
-## Load the modules.
-include conf_dir + "/modules.conf"
-
-##
-#######################################################################
-
-#######################################################################
-##
-##  Basic Configuration
-## ---------------------
-##
-server.port = 80
-
-##
-## bind to a specific IP
-## (default: "*" for all local IPv4 interfaces)
-##
-#server.bind = "localhost"
-
-##
-## Run as a different username/groupname.
-## This requires root permissions during startup. 
-##
-server.username  = "@USER@"
-server.groupname = "@GROUP@"
-
-##
-## Enable lighttpd to serve requests on sockets received from systemd
-## https://www.freedesktop.org/software/systemd/man/systemd.socket.html
-##
-#server.systemd-socket-activation = "enable"
-
-## 
-## enable core files.
-##
-#server.core-files = "disable"
-
-##
-## Document root
-##
-server.document-root = server_root + "/htdocs"
-
-##
-## The value for the "Server:" response field.
-##
-## It would be nice to keep it at "lighttpd".
-##
-#server.tag = "lighttpd"
-
-##
-## store a pid file
-##
-server.pid-file = state_dir + "/lighttpd.pid"
-
-##
-#######################################################################
-
-#######################################################################
-##
-##  Logging Options
-## ------------------
-##
-## all logging options can be overwritten per vhost.
-##
-## Path to the error log file
-##
-server.errorlog             = log_root + "/error.log"
-
-##
-## If you want to log to syslog you have to unset the 
-## server.errorlog setting and uncomment the next line.
-##
-#server.errorlog-use-syslog = "enable"
-
-##
-## Access log config
-## 
-include conf_dir + "/conf.d/access_log.conf"
-
-##
-## The debug options are moved into their own file.
-## see conf.d/debug.conf for various options for request debugging.
-##
-include conf_dir + "/conf.d/debug.conf"
-
-##
-#######################################################################
-
-#######################################################################
-##
-##  Tuning/Performance
-## --------------------
-##
-## corresponding documentation:
-## https://wiki.lighttpd.net/Docs_Performance
-##
-## set the event-handler (read the performance section in the manual)
-##
-## The recommended server.event-handler is chosen by default for each OS.
-##
-## epoll  (recommended on Linux)
-## kqueue (recommended on *BSD and MacOS X)
-## solaris-eventports (recommended on Solaris)
-## poll   (recommended if none of above are available)
-## select (*not* recommended)
-##
-#server.event-handler = "linux-sysepoll"
-
-##
-## The basic network interface for all platforms at the syscalls read()
-## and write(). Every modern OS provides its own syscall to help network
-## servers transfer files as fast as possible 
-##
-#server.network-backend = "sendfile"
-
-##
-## As lighttpd is a single-threaded server, its main resource limit is
-## the number of file descriptors, which is set to 1024 by default (on
-## most systems).
-##
-## If you are running a high-traffic site you might want to increase this
-## limit by setting server.max-fds.
-##
-## Changing this setting requires root permissions on startup. see
-## server.username/server.groupname.
-##
-## By default lighttpd would not change the operation system default.
-## But setting it to 16384 is a better default for busy servers.
-##
-## With SELinux enabled, this is denied by default and needs to be allowed
-## by running the following once: setsebool -P httpd_setrlimit on
-##
-server.max-fds = 16384
-
-##
-## listen-backlog is the size of the listen() backlog queue requested when
-## the lighttpd server ask the kernel to listen() on the provided network
-## address.  Clients attempting to connect() to the server enter the listen()
-## backlog queue and wait for the lighttpd server to accept() the connection.
-##
-## The out-of-box default on many operating systems is 128 and is identified
-## as SOMAXCONN.  This can be tuned on many operating systems.  (On Linux,
-## cat /proc/sys/net/core/somaxconn)  Requesting a size larger than operating
-## system limit will be silently reduced to the limit by the operating system.
-##
-## When there are too many connection attempts waiting for the server to
-## accept() new connections, the listen backlog queue fills and the kernel
-## rejects additional connection attempts.  This can be useful as an
-## indication to an upstream load balancer that the server is busy, and
-## possibly overloaded.  In that case, configure a smaller limit for
-## server.listen-backlog.  On the other hand, configure a larger limit to be
-## able to handle bursts of new connections, but only do so up to an amount
-## that the server can keep up with responding in a reasonable amount of
-## time.  Otherwise, clients may abandon the connection attempts and the
-## server will waste resources servicing abandoned connections.
+## References
+## Wiki: https://wiki.lighttpd.net/
+## Configuration: Quick Start: https://wiki.lighttpd.net/TutorialConfiguration
+## Configuration: File Syntax: https://wiki.lighttpd.net/Docs_Configuration
+## Configuration: Options: https://wiki.lighttpd.net/Docs_ConfigurationOptions
 ##
-## It is best to leave this setting at its default unless you have modelled
-## your traffic and tested that changing this benefits your traffic patterns.
+## There are multiple ways to configure lighttpd; no one-size-fits-all method.
+## 1. single file; everything in /etc/lighttpd/lighttpd.conf
+## 2. include specific files from /etc/lighttpd/conf.d/...
+## 3. include all files from /etc/lighttpd/conf-enabled/*
+## 4. generate config from script (e.g. using 'include_shell')
+## 5. combination of one or more of the above, or some other way ...
+## Please choose what works best for you.
 ##
-## Default: 1024
+## (1) may be implemented by commenting out 'include' lines for (2) and (3)
+##     and then writing the lighttpd configuration below.  The minimum lighttpd
+##     configuration is a single line: server.document-root = "/var/www/html"
+##     for lighttpd to listen on port 80 and serve files from /var/www/html.
 ##
-#server.listen-backlog = 128
-
-##
-## Stat() call caching.
-##
-## lighttpd can utilize FAM/Gamin to cache stat call.
-##
-## possible values are:
-## disable, simple, inotify, kqueue, or fam.
-##
-#server.stat-cache-engine = "simple"
-
-##
-## Fine tuning for the request handling
-##
-## max-connections == max-fds/3)
-## (other file handles are used for fastcgi/files)
-##
-#server.max-connections = 1024
-
-##
-## How many seconds to keep a keep-alive connection open,
-## until we consider it idle. 
-##
-## Default: 5
-##
-#server.max-keep-alive-idle = 5
-
-##
-## How many keep-alive requests until closing the connection.
-##
-## Default: 16
-##
-#server.max-keep-alive-requests = 16
-
-##
-## Maximum size of a request in kilobytes.
-## By default it is unlimited (0).
-##
-## Uploads to your server cant be larger than this value.
-##
-#server.max-request-size = 0
-
-##
-## Time to read from a socket before we consider it idle.
-##
-## Default: 60
-##
-#server.max-read-idle = 60
-
-##
-## Time to write to a socket before we consider it idle.
-##
-## Default: 360
-##
-#server.max-write-idle = 360
-
-##
-##  Traffic Shaping 
-## -----------------
-##
-## see /usr/share/doc/lighttpd/traffic-shaping.txt
-##
-## Values are in kilobyte per second.
-##
-## Keep in mind that a limit below 32kB/s might actually limit the
-## traffic to 32kB/s. This is caused by the size of the TCP send
-## buffer. 
-##
-## per server:
-##
-#server.kbytes-per-second = 128
-
-##
-## per connection:
-##
-#connection.kbytes-per-second = 32
-
-##
-#######################################################################
-
-#######################################################################
-##
-##  Filename/File handling
-## ------------------------
-
-##
-## files to check for if .../ is requested
-## index-file.names            = ( "index.php", "index.rb", "index.html",
-##                                 "index.htm", "default.htm" )
-##
-index-file.names += (
-  "index.xhtml", "index.html", "index.htm", "default.htm", "index.php"
-)
-
-##
-## deny access the file-extensions
+## (2) may be implemented via the following (and ok if files do not exist)
+##     for backwards compatibility with the historic contents of this file.
+##     /etc/lighttpd/lighttpd.annotated.conf contains common directives
+##     and comments describing those directives.  More details may be found
+##     by following the links in the References section above.
 ##
-## ~    is for backupfiles from vi, emacs, joe, ...
-## .inc is often used for code includes which should in general not be part
-##      of the document-root
-url.access-deny             = ( "~", ".inc" )
-
-##
-## disable range requests for pdf files
-## workaround for a bug in the Acrobat Reader plugin.
-## (ancient; should no longer be needed)
-##
-#$HTTP["url"] =~ "\.pdf$" {
-#  server.range-requests = "disable"
-#}
-
-##
-## url handling modules (rewrite, redirect)
-##
-#url.rewrite                = ( "^/$"             => "/server-status" )
-#url.redirect               = ( "^/wishlist/(.+)" => "http://www.example.com/$1" )
-
-##
-## both rewrite/redirect support back reference to regex conditional using %n
-##
-#$HTTP["host"] =~ "^www\.(.*)" {
-#  url.redirect            = ( "^/(.*)" => "http://%1/$1" )
-#}
-
-##
-## which extensions should not be handle via static-file transfer
-##
-## .php, .pl, .fcgi are most often handled by mod_fastcgi or mod_cgi
-##
-static-file.exclude-extensions = ( ".php", ".pl", ".fcgi", ".scgi" )
-
-##
-## error-handler for all status 400-599
-##
-#server.error-handler       = "/error-handler.html"
-#server.error-handler       = "/error-handler.php"
-
-##
-## error-handler for status 404
-##
-#server.error-handler-404   = "/error-handler.html"
-#server.error-handler-404   = "/error-handler.php"
-
-##
-## Format: <errorfile-prefix><status-code>.html
-## -> ..../status-404.html for 'File not found'
-##
-#server.errorfile-prefix    = server_root + "/htdocs/errors/status-"
-
-##
-## mimetype mapping
-##
-include conf_dir + "/conf.d/mime.conf"
-
-##
-## directory listing configuration
+include "/etc/lighttpd/lighttpd*annotated.conf"
 ##
-include conf_dir + "/conf.d/dirlisting.conf"
-
+## (3) may be implemented via the following (and ok if files do not exist)
 ##
-## Should lighttpd follow symlinks?
-## default: "enable"
-#server.follow-symlink = "enable"
-
-##
-## force all filenames to be lowercase?
-##
-#server.force-lowercase-filenames = "disable"
-
-##
-## defaults to /var/tmp as we assume it is a local harddisk
-## default: "/var/tmp"
-#server.upload-dirs = ( "/var/tmp" )
-
+include "/etc/lighttpd/conf-enabled/*.conf"
 ##
 #######################################################################
 
-#######################################################################
-##
-##  SSL Support
-## ------------- 
-##
-## https://wiki.lighttpd.net/Docs_SSL
-#
-## To enable SSL for the whole server you have to provide a valid
-## certificate and have to enable the SSL engine.::
-##
-##   server.modules += ( "mod_openssl" )
-##
-##   ssl.privkey = "/path/to/privkey.pem"
-##   ssl.pemfile = "/path/to/fullchain.pem"
-##   # ssl.pemfile should contain the sorted certificate chain, including
-##   # intermediate certificates, as provided by the certificate issuer.
-##   # If both privkey and cert are in same file, specify only ssl.pemfile.
-##
-##   # Check your cipher list with: openssl ciphers -v '...'
-##   # (use single quotes with: openssl ciphers -v '...'
-##   #  as your shell won't like ! in double quotes)
-##   #ssl.cipher-list            = "HIGH"   # default
-##
-##   # (recommended to accept only TLSv1.2 and TLSv1.3)
-##   #ssl.openssl.ssl-conf-cmd = ("MinProtocol" => "TLSv1.2")  # default
-##
-##   $SERVER["socket"] == "*:443" {
-##     ssl.engine  = "enable"
-##   }
-##   $SERVER["socket"] == "[::]:443" {
-##     ssl.engine  = "enable"
-##   }
-##
-#######################################################################
-
-#######################################################################
-##
-## custom includes like vhosts.
-##
-#include conf_dir + "/conf.d/config.conf"
-#include conf_dir + "/vhosts.d/*.conf"
-##
-#######################################################################
+#server.document-root = "/var/www/html"
diff --git a/network/lighttpd/doinst.sh b/network/lighttpd/doinst.sh
index 15d061192f..456c97972f 100644
--- a/network/lighttpd/doinst.sh
+++ b/network/lighttpd/doinst.sh
@@ -29,5 +29,6 @@ done
 
 config etc/logrotate.d/lighttpd.new
 config etc/rc.d/rc.lighttpd.new
+config etc/lighttpd/lighttpd.annotated.conf.new
 config etc/lighttpd/lighttpd.conf.new
 config etc/lighttpd/modules.conf.new
diff --git a/network/lighttpd/lighttpd.SlackBuild b/network/lighttpd/lighttpd.SlackBuild
index 6f11dbac3e..516e82e0a8 100644
--- a/network/lighttpd/lighttpd.SlackBuild
+++ b/network/lighttpd/lighttpd.SlackBuild
@@ -3,7 +3,7 @@
 # Slackware build script for lighttpd
 
 # Copyright (c) 2007 Daniel de Kok <moc.mikciat@leinad>
-# Copyright 2016-2024 Matteo Bernardini <ponce@slackbuilds.org>, Pisa, Italy
+# Copyright 2016-2025 Matteo Bernardini <ponce@slackbuilds.org>, Pisa, Italy
 # All rights reserved.
 #
 # Redistribution and use of this script, with or without modification, is
@@ -26,7 +26,7 @@
 cd $(dirname $0) ; CWD=$(pwd)
 
 PRGNAM=lighttpd
-VERSION=${VERSION:-1.4.76}
+VERSION=${VERSION:-1.4.77}
 BUILD=${BUILD:-1}
 TAG=${TAG:-_SBo}
 PKGTYPE=${PKGTYPE:-tgz}
@@ -39,9 +39,6 @@ if [ -z "$ARCH" ]; then
   esac
 fi
 
-# If the variable PRINT_PACKAGE_NAME is set, then this script will report what
-# the name of the created package would be, and then exit. This information
-# could be useful to other scripts.
 if [ ! -z "${PRINT_PACKAGE_NAME}" ]; then
   echo "$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.$PKGTYPE"
   exit 0
@@ -122,7 +119,6 @@ make install-strip DESTDIR=$PKG
 
 mkdir -p $PKG/var/cache/$PRGNAM $PKG/var/log/$PRGNAM
 chmod 0700 $PKG/var/cache/lighttpd
-mkdir -p $PKG/var/www/htdocs-lighttpd
 touch $PKG/var/log/lighttpd/access.log.new \
   $PKG/var/log/lighttpd/error.log.new
 
@@ -137,7 +133,8 @@ sed -e "s,@USER@,$LIGHTTPD_USER," -e "s,@GROUP@,$LIGHTTPD_GROUP," \
 
 mkdir -p $PKG/etc/$PRGNAM/{conf,vhosts}.d
 sed -e "s,@USER@,$LIGHTTPD_USER," -e "s,@GROUP@,$LIGHTTPD_GROUP," \
-  $CWD/conf/$PRGNAM.conf > $PKG/etc/$PRGNAM/$PRGNAM.conf.new
+  $CWD/conf/$PRGNAM.annotated.conf > $PKG/etc/$PRGNAM/$PRGNAM.annotated.conf.new
+cp doc/config/$PRGNAM.conf $PKG/etc/$PRGNAM/$PRGNAM.conf.new
 cp doc/config/modules.conf $PKG/etc/$PRGNAM/modules.conf.new
 cp doc/config/vhosts.d/vhosts.template $PKG/etc/$PRGNAM/vhosts.d
 
diff --git a/network/lighttpd/lighttpd.info b/network/lighttpd/lighttpd.info
index e66a015e97..e4e3a3d577 100644
--- a/network/lighttpd/lighttpd.info
+++ b/network/lighttpd/lighttpd.info
@@ -1,8 +1,8 @@
 PRGNAM="lighttpd"
-VERSION="1.4.76"
+VERSION="1.4.77"
 HOMEPAGE="http://www.lighttpd.net/"
-DOWNLOAD="http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.76.tar.xz"
-MD5SUM="f9018cda389b1aa6dae4c5f962c20825"
+DOWNLOAD="http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.77.tar.xz"
+MD5SUM="3bd1d9d3853d539cc99791a2eb725d39"
 DOWNLOAD_x86_64=""
 MD5SUM_x86_64=""
 REQUIRES=""