Diff options
Diffstat (limited to '')
-rw-r--r--custom/servers/lighttpd.conf22
1 file changed, 8 insertions, 14 deletions
diff --git a/custom/servers/lighttpd.conf b/custom/servers/lighttpd.conf
index 8fef3c4..edbf162 100644
--- a/custom/servers/lighttpd.conf
+++ b/custom/servers/lighttpd.conf
@@ -9,19 +9,18 @@
# lighttpd -D -f /path/to/lighttpd.conf # run it in the foreground
#
# lighttpd runs the cgit.cgi binary directly through mod_cgi, so no FastCGI
-# bridge is needed. This is cgit's classic reference deployment, mod_cgi with
-# mod_alias and mod_setenv.
+# bridge is needed.
#
# Paths assumed below, edit them to match your install.
# cgit CGI binary /usr/lib/cgit/cgit.cgi
# static assets /usr/share/cgit (cgit.css cgit.js cgit.png favicon.ico robots.txt)
# cgit config /etc/cgitrc
-# public URL https://git.example.org/ (cgit at the domain root)
+# public url https://git.example.org/ (cgit at the domain root)
#
# cgit is one CGI executable. It learns the repository and the page from
-# PATH_INFO and reads page options such as h= and id= from QUERY_STRING. cgit
-# builds its own link base from SCRIPT_NAME. The five static assets are served
-# straight off disk and must never be routed through cgit.
+# PATH_INFO and reads page options such as h= and id= from QUERY_STRING. The
+# five static assets are served straight off disk and must never be routed
+# through cgit.
# A plain assignment rather than "+=", since this config stands on its own
@@ -75,13 +74,8 @@ $HTTP["host"] == "git.example.org" {
setenv.add-environment = ( "CGIT_CONFIG" => "/etc/cgitrc" )
# Site-wide security headers are set here so they also cover the static
- # assets lighttpd serves. cgit itself sends only the headers the server
- # cannot supply. Those are Status, Content-Type, Content-Length and
- # Content-Disposition on downloads, Location on redirects, a Cache-Control
- # marking the login page no-store and a page behind an auth filter private,
- # the auth filter's Set-Cookie, and on raw repository bytes a nosniff of
- # its own next to the stricter policy "default-src 'none'". Everything
- # else, this policy included, is the server's job.
+ # assets lighttpd serves. On raw repository bytes cgit sends a nosniff and
+ # the stricter policy "default-src 'none'" of its own.
#
# The add in add-response-header is load bearing. It appends a second
# copy next to what cgit emitted, so a raw page carries both policies and
@@ -128,7 +122,7 @@ $HTTP["host"] == "git.example.org" {
# hands everything else to cgit.
#
# The trailing slash on cgit.cgi/ is load bearing. lighttpd builds the
- # physical path by stripping the matched key off the front of the URL and
+ # physical path by stripping the matched key off the front of the url and
# appending the rest to the value. For the key / the remainder carries no
# leading slash, so without the trailing slash a request for
# /linux/tree/kernel/sched.c glues onto the binary name as