mirror of
https://github.com/pi-hole/pi-hole.git
synced 2024-12-25 14:20:18 +00:00
75 lines
3 KiB
Text
75 lines
3 KiB
Text
# Pi-hole: A black hole for Internet advertisements
|
|
# (c) 2017 Pi-hole, LLC (https://pi-hole.net)
|
|
# Network-wide ad blocking via your own hardware.
|
|
#
|
|
# Lighttpd config for Pi-hole
|
|
#
|
|
# This file is copyright under the latest version of the EUPL.
|
|
# Please see LICENSE file for your rights under this license.
|
|
|
|
###############################################################################
|
|
# FILE AUTOMATICALLY OVERWRITTEN BY PI-HOLE INSTALL/UPDATE PROCEDURE. #
|
|
# ANY CHANGES MADE TO THIS FILE AFTER INSTALL WILL BE LOST ON THE NEXT UPDATE #
|
|
# #
|
|
# CHANGES SHOULD BE MADE IN A SEPARATE CONFIG FILE: #
|
|
# /etc/lighttpd/external.conf #
|
|
###############################################################################
|
|
|
|
server.modules = (
|
|
"mod_access",
|
|
"mod_accesslog",
|
|
"mod_auth",
|
|
"mod_expire",
|
|
"mod_compress",
|
|
"mod_redirect",
|
|
"mod_setenv",
|
|
"mod_rewrite"
|
|
)
|
|
|
|
server.document-root = "/var/www/html"
|
|
server.error-handler-404 = "pihole/index.php"
|
|
server.upload-dirs = ( "/var/cache/lighttpd/uploads" )
|
|
server.errorlog = "/var/log/lighttpd/error.log"
|
|
server.pid-file = "/var/run/lighttpd.pid"
|
|
server.username = "www-data"
|
|
server.groupname = "www-data"
|
|
server.port = 80
|
|
accesslog.filename = "/var/log/lighttpd/access.log"
|
|
accesslog.format = "%{%s}t|%V|%r|%s|%b"
|
|
|
|
index-file.names = ( "index.php", "index.html", "index.lighttpd.html" )
|
|
url.access-deny = ( "~", ".inc", ".md", ".yml", ".ini" )
|
|
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
|
|
|
|
compress.cache-dir = "/var/cache/lighttpd/compress/"
|
|
compress.filetype = ( "application/javascript", "text/css", "text/html", "text/plain" )
|
|
|
|
# default listening port for IPv6 falls back to the IPv4 port
|
|
include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port
|
|
include_shell "/usr/share/lighttpd/create-mime.assign.pl"
|
|
|
|
# Prevent Lighttpd from enabling Let's Encrypt SSL for every blocked domain
|
|
#include_shell "/usr/share/lighttpd/include-conf-enabled.pl"
|
|
include_shell "find /etc/lighttpd/conf-enabled -name '*.conf' -a ! -name 'letsencrypt.conf' -printf 'include \"%p\"\n' 2>/dev/null"
|
|
|
|
# If the URL starts with /admin, it is the Web interface
|
|
$HTTP["url"] =~ "^/admin/" {
|
|
# Create a response header for debugging using curl -I
|
|
setenv.add-response-header = (
|
|
"X-Pi-hole" => "The Pi-hole Web interface is working!",
|
|
"X-Frame-Options" => "DENY"
|
|
)
|
|
|
|
$HTTP["url"] =~ ".ttf$" {
|
|
# Allow Block Page access to local fonts
|
|
setenv.add-response-header = ( "Access-Control-Allow-Origin" => "*" )
|
|
}
|
|
}
|
|
|
|
# Block . files from being served, such as .git, .github, .gitignore
|
|
$HTTP["url"] =~ "^/admin/\.(.*)" {
|
|
url.access-deny = ("")
|
|
}
|
|
|
|
# Add user chosen options held in external file
|
|
include_shell "cat external.conf 2>/dev/null"
|