Ticket #1652: backup.conf

server.modules              = (
                                "mod_access",
                                "mod_auth",
                                "mod_status",
#                               "mod_fastcgi",
#                               "mod_proxy",
#                               "mod_userdir",
                                "mod_accesslog" )


server.document-root        = "/home/Backup"


## where to send error-messages to
server.errorlog             = "/home/Backup/log/lighttpd/backup_error.log"

# files to check for if .../ is requested
#index-file.names            = ( "index.php", "index.html",
#                                "index.htm", "default.htm" )

# mimetype mapping
mimetype.assign             = (
  ".pdf"          =>      "application/pdf",
  ".sig"          =>      "application/pgp-signature",
  ".spl"          =>      "application/futuresplash",
  ".class"        =>      "application/octet-stream",
  ".ps"           =>      "application/postscript",
  ".torrent"      =>      "application/x-bittorrent",
  ".dvi"          =>      "application/x-dvi",
  ".gz"           =>      "application/x-gzip",
  ".pac"          =>      "application/x-ns-proxy-autoconfig",
  ".swf"          =>      "application/x-shockwave-flash",
  ".tar.gz"       =>      "application/x-tgz",
  ".tgz"          =>      "application/x-tgz",
  ".tar"          =>      "application/x-tar",
  ".zip"          =>      "application/zip",
  ".mp3"          =>      "audio/mpeg",
  ".m3u"          =>      "audio/x-mpegurl",
  ".wma"          =>      "audio/x-ms-wma",
  ".wax"          =>      "audio/x-ms-wax",
  ".ogg"          =>      "application/ogg",
  ".wav"          =>      "audio/x-wav",
  ".gif"          =>      "image/gif",
  ".jpg"          =>      "image/jpeg",
  ".jpeg"         =>      "image/jpeg",
  ".png"          =>      "image/png",
  ".xbm"          =>      "image/x-xbitmap",
  ".xpm"          =>      "image/x-xpixmap",
  ".xwd"          =>      "image/x-xwindowdump",
  ".css"          =>      "text/css",
  ".html"         =>      "text/html",
  ".htm"          =>      "text/html",
  ".js"           =>      "text/javascript",

  ".asc"          =>      "text/plain",
  ".rb"           =>      "text/plain",
  ".sh"           =>      "text/plain",
  ".c"            =>      "text/plain",
  ".cpp"          =>      "text/plain",
  ".log"          =>      "text/plain",
  ".conf"         =>      "text/plain",
  ".text"         =>      "text/plain",
  ".txt"          =>      "text/plain",
  ".dtd"          =>      "text/xml",
  ".xml"          =>      "text/xml",

  ".mpeg"         =>      "video/mpeg",
  ".mpg"          =>      "video/mpeg",
  ".mov"          =>      "video/quicktime",
  ".qt"           =>      "video/quicktime",
  ".avi"          =>      "video/x-msvideo",
  ".asf"          =>      "video/x-ms-asf",
  ".asx"          =>      "video/x-ms-asf",
  ".wmv"          =>      "video/x-ms-wmv",
  ".bz2"          =>      "application/x-bzip",
  ".tbz"          =>      "application/x-bzip-compressed-tar",
  ".tar.bz2"      =>      "application/x-bzip-compressed-tar",
  # default mime type
  ""              =>      "text/plain",
 )

# Use the "Content-Type" extended attribute to obtain mime type if possible
mimetype.use-xattr        = "enable"


#### accesslog module
accesslog.filename          = "/home/Backup/log/lighttpd/backup_access.log"

## deny access the file-extensions
#
# ~    is for backupfiles from vi, emacs, joe, ...
# .inc is often used for code includes which should in general not be part
#      of the document-root
url.access-deny             = ( "~", ".inc", ".currently_building" )

$HTTP["url"] =~ "\.pdf$" {
  server.range-requests = "disable"
}

##
# which extensions should not be handle via static-file transfer
#
# .php, .pl, .fcgi are most often handled by mod_fastcgi or mod_cgi
#static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )


## bind to port (default: 80)
#server.port                = 81

## bind to localhost (default: all interfaces)
#server.bind                = "127.0.0.1"


## NOTICE: This script is intendent to be started by the Administrator user
##         and it will downgrade proccess uid to Backup during startup
server.pid-file            = "/home/Administrator/run/lighttpd_backup.pid"


## virtual directory listings
dir-listing.activate        = "enable"
dir-listing.show-header     = "enable"
dir-listing.show-readme     = "enable"
dir-listing.set-footer      = "University of California<br/>Genomics Institute"

dir-listing.hide-dotfiles = "enable"


## enable debugging
#debug.log-request-header   = "enable"
#debug.log-response-header  = "enable"
#debug.log-request-handling = "enable"
#debug.log-file-not-found   = "enable"

### only root can use these options
#
# chroot() to directory (default: no chroot() )
#server.chroot              = "/"

## change uid and gid of the lighttpd process
server.username            = "Backup"
server.groupname           = "None"


#### proxy module
## read proxy.txt for more info
#proxy.server               = ( ".php" =>
#                               ( "localhost" =>
#                                 (
#                                   "host" => "192.168.0.101",
#                                   "port" => 80
#                                 )
#                               )
#                             )





#### status module
status.status-url          = "/log/lighttpd/server-status"
status.config-url          = "/log/lighttpd/server-config"



#### auth module

## read authentication.txt for more info
auth.backend               = "htdigest"
auth.backend.htdigest.userfile  = "/etc/lighttpd/htdigest.user"


# White List is
# Root (without /), Root (with /), or Any file in root :
# (See the last "Everithing Else" statement)

$HTTP["url"] == "/Ftp Server Replacement/" {
  # allow

  #auth.require = ( "" =>
  #            (
  #               "method"  => "digest",
  #               "realm"   => "the Genomics Institute",
  #               "require" => "valid-user"
  #            )
  #          )
}

else $HTTP["url"] == "/Ftp Server Replacement/IIGB_Data/" {
  # allow

  #     auth.require = ( "" =>
  #                 (
  #                    "method"  => "digest",
  #                    "realm"   => "the Genomics Institute",
  #                    "require" => "valid-user"
  #                 )
  #               )
}

else $HTTP["url"] == "/Ftp Server Replacement/IIGB_Data/ABI/" {
  # allow

  #     auth.require = ( "" =>
  #                 (
  #                    "method"  => "digest",
  #                    "realm"   => "the Genomics Institute",
  #                    "require" => "valid-user"
  #                 )
  #               )
  #
}

else $HTTP["url"] == "/Ftp Server Replacement/IIGB_Data/ABI/UCR_Users/" {
  # allow 

  #     auth.require = ( "" =>
  #                 (
  #                    "method"  => "digest",
  #                    "realm"   => "the Genomics Institute",
  #                    "require" => "valid-user"
  #                 )
  #               )
  #
} 

else $HTTP["url"] == "/Ftp Server Replacement/IIGB_Data/ABI/External_Users/" {
  # allow 

  #     auth.require = ( "" =>
  #                 (
  #                    "method"  => "digest",
  #                    "realm"   => "the Genomics Institute",
  #                    "require" => "valid-user"
  #                 )
  #               )
  #
} 


# 
# UCR Users
# 

else $HTTP["url"] =~ "/Ftp Server Replacement/IIGB_Data/ABI/UCR_Users/.+" {
  include "ucr_users.conf"
}



#
# Exteranl Users
#

else $HTTP["url"] =~ "/Ftp Server Replacement/IIGB_Data/ABI/External_Users/.+" {
  include "external_users.conf"
}



# 
# Everithing Else
#

else $HTTP["url"] !~ "^$|^/$" {
  auth.require = ( "" =>
              (
                "method"  => "digest",
                "realm"   => "the Genomics Institute",
                "require" => "user=root"
              )
             )
}



#### SSL engine
#ssl.engine                 = "enable"
#ssl.pemfile                = "/etc/ssl/private/lighttpd.pem"