package/network/services/uhttpd/files/uhttpd.config

   1 # Server configuration
   2 config uhttpd main
   3
   4         # HTTP listen addresses, multiple allowed
   5         list listen_http        0.0.0.0:80
   6         list listen_http        [::]:80
   7
   8         # HTTPS listen addresses, multiple allowed
   9         list listen_https       0.0.0.0:443
  10         list listen_https       [::]:443
  11
  12         # Redirect HTTP requests to HTTPS if possible
  13         option redirect_https   1
  14
  15         # Server document root
  16         option home             /www
  17
  18         # Reject requests from RFC1918 IP addresses
  19         # directed to the servers public IP(s).
  20         # This is a DNS rebinding countermeasure.
  21         option rfc1918_filter 1
  22
  23         # Maximum number of concurrent requests.
  24         # If this number is exceeded, further requests are
  25         # queued until the number of running requests drops
  26         # below the limit again.
  27         option max_requests 3
  28
  29         # Maximum number of concurrent connections.
  30         # If this number is exceeded, further TCP connection
  31         # attempts are queued until the number of active
  32         # connections drops below the limit again.
  33         option max_connections 100
  34
  35         # Certificate and private key for HTTPS.
  36         # If no listen_https addresses are given,
  37         # the key options are ignored.
  38         option cert             /etc/uhttpd.crt
  39         option key              /etc/uhttpd.key
  40
  41         # CGI url prefix, will be searched in docroot.
  42         # Default is /cgi-bin
  43         option cgi_prefix       /cgi-bin
  44
  45         # List of extension->interpreter mappings.
  46         # Files with an associated interpreter can
  47         # be called outside of the CGI prefix and do
  48         # not need to be executable.
  49 #       list interpreter        ".php=/usr/bin/php-cgi"
  50 #       list interpreter        ".cgi=/usr/bin/perl"
  51
  52         # Lua url prefix and handler script.
  53         # Lua support is disabled if no prefix given.
  54 #       option lua_prefix       /luci
  55 #       option lua_handler      /usr/lib/lua/luci/sgi/uhttpd.lua
  56
  57         # Specify the ubus-rpc prefix and socket path.
  58 #       option ubus_prefix      /ubus
  59 #       option ubus_socket      /var/run/ubus.sock
  60
  61         # CGI/Lua timeout, if the called script does not
  62         # write data within the given amount of seconds,
  63         # the server will terminate the request with
  64         # 504 Gateway Timeout response.
  65         option script_timeout   60
  66
  67         # Network timeout, if the current connection is
  68         # blocked for the specified amount of seconds,
  69         # the server will terminate the associated
  70         # request process.
  71         option network_timeout  30
  72
  73         # HTTP Keep-Alive, specifies the timeout for persistent
  74         # HTTP/1.1 connections. Setting this to 0 will disable
  75         # persistent HTTP connections.
  76         option http_keepalive   20
  77
  78         # TCP Keep-Alive, send periodic keep-alive probes
  79         # over established connections to detect dead peers.
  80         # The value is given in seconds to specify the
  81         # interval between subsequent probes.
  82         # Setting this to 0 will disable TCP keep-alive.
  83         option tcp_keepalive    1
  84
  85         # Basic auth realm, defaults to local hostname
  86 #       option realm    Lede
  87
  88         # Configuration file in busybox httpd format
  89 #       option config   /etc/httpd.conf
  90
  91         # Do not follow symlinks that point outside of the
  92         # home directory.
  93 #       option no_symlinks      0
  94
  95         # Do not produce directory listings but send 403
  96         # instead if a client requests an url pointing to
  97         # a directory without any index file.
  98 #       option no_dirlists      0
  99
 100         # Do not authenticate any ubus-rpc requests against
 101         # the ubus session/access procedure.
 102         # This is dangerous and should be always left off
 103         # except for development and debug purposes!
 104 #       option no_ubusauth      0
 105
 106
 107 # Certificate defaults for px5g key generator
 108 config cert px5g
 109
 110         # Validity time
 111         option days             730
 112
 113         # RSA key size
 114         option bits             2048
 115
 116         # Location
 117         option country          ZZ
 118         option state            Somewhere
 119         option location         Unknown
 120
 121         # Common name
 122         option commonname       Lede