# BastionGuard WebUI - Lighttpd + PHP-FPM
# Install location: /usr/share/BastionGuard/webui
# Include this file from lighttpd.conf.

server.modules += ( "mod_alias", "mod_fastcgi", "mod_rewrite", "mod_setenv" )

alias.url += (
    "/bastionguard/" => "/usr/share/BastionGuard/webui/",
    "/bastionguard"  => "/usr/share/BastionGuard/webui/"
)

$HTTP["url"] =~ "^/bastionguard/(data|db|scripts)(/|$)" {
    url.access-deny = ( "" )
}

index-file.names += ( "index.php" )

fastcgi.server += (
    ".php" => ((
        "socket" => "/run/php-fpm/php-fpm.sock",
        "broken-scriptfilename" => "enable"
    ))
)

setenv.add-response-header = (
    "X-Content-Type-Options" => "nosniff",
    "X-Frame-Options" => "SAMEORIGIN",
    "Referrer-Policy" => "same-origin"
)