Documentation: Configuration for Lighttpd

[ntinti]

Here my working config for lighttpd on FreeBSD 11

uwsgi-server options with socket:

/usr/local/bin/uwsgi -w /usr/local/share/automx/automx_wsgi.py --wsgi-file /usr/local/share/automx/automx_wsgi.py --pidfile /var/run/uwsgi-automx.pid -s /var/run/uwsgi-automx.sock --chmod-socket=660 --chown-socket=www:www -d /var/log/uwsgi-automx.log --uid www --gid www

Options in /etc/rc.conf:

uwsgi_enable="YES"
uwsgi_socket_owner="www:www"
uwsgi_profiles="automx"
uwsgi_automx_enable="YES"
uwsgi_automx_uid="www"
uwsgi_automx_gid="www"
uwsgi_automx_socket="/var/run/uwsgi-automx.sock"
uwsgi_automx_flags="-w /usr/local/share/automx/automx_wsgi.py --wsgi-file /usr/local/share/automx/automx_wsgi.py"

Lighttpd version > 1.4.42
lighty config:

server.modules += ( "mod_scgi" )
scgi.protocol = "uwsgi"
$HTTP["url"] =~ "^/mail" {
        scgi.server = ( "config-v1.1.xml" => ( "localhost" => (  "socket" => "/var/run/uwsgi-automx.sock", "check-local" => "disable" )))
        }
$SERVER["socket"] == "1.2.3.4:443" {
   ssl.engine                  = "enable"
   ssl.pemfile                 =  config + "certs/server.pem"
server.document-root = server_root + "/lighttpd-dist"
$HTTP["url"] =~ "^/autodiscover" {
        scgi.server = ( "autodiscover.xml" => ( "localhost" => (  "socket" => "/var/run/uwsgi-automx.sock", "check-local" => "disable" )))
        }
$HTTP["url"] =~ "^/mobileconfig" {
        scgi.server = ( "" => ( "localhost" => (  "socket" => "/var/run/uwsgi-automx.sock", "check-local" => "disable" )))
        }
}

automx.conf:

[automx]
provider = mailserver.tld
domains = *

debug = yes
logfile = /var/log/automx/automx.log

client_error_limit = 20
rate_limit_exception_networks = 127.0.0.0/8, ::1/128

[DEFAULT]
account_type = email
account_name = ${display_name} (${email})
account_name_short =

[global]
backend = sql
action = settings
host = postgresql+psycopg2://user:password@host/db
query = SELECT name AS display_name, email, mx FROM table WHERE email='%s'
result_attrs = display_name, email, mx

sign_mobileconfig = yes
sign_cert = /usr/local/etc/letsencrypt/live/domain.tld/fullchain.pem
sign_key =  /usr/local/etc/letsencrypt/live/domain.tld/privkey.pem

smtp = yes
smtp_server = ${mx}
smtp_port = 587
smtp_encryption = starttls
smtp_auth = plaintext
smtp_auth_identity = ${email}
smtp_refresh_ttl = 6
smtp_default = yes

...