server.modules += ( "mod_accesslog", "mod_alias", "mod_cgi", "mod_redirect", "mod_rewrite", "mod_setenv" )

server.port = 80

# See here: https://redmine.lighttpd.net/boards/2/topics/8382
accesslog.filename = "/dev/fd/3"

include "@mimetypes@"

server.document-root = "@site@"
index-file.names = ( "index.html" )

setenv.set-response-header += (
	"Content-Security-Policy" => "default-src 'self'; script-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com; frame-ancestors 'none'",
)

url.redirect = (
	# These are redirects from the old site - keep them so we don't hurt any
	# search engine indexes!
	"^/unser-verein($|/)" => "/ueber-uns",
	"^/mitglied-werden($|/)" => "/mitmachen",
	"^/geld-spenden($|/)" => "/spenden",
	"^/sonstige-unterstuetzung($|/)" => "/spenden",
	"^/computerspende($|/)" => "/#computerspende",
	"^/computer-spenden($|/)" => "/hardware-spenden",
	"^/kooperation($|/)" => "/ueber-uns/partner",
	"^/satzung($|/)" => "/ueber-uns/satzung",
	"^/presse($|/)" => "/neuigkeiten/pressestimmen",
)

#
# CGI / form handling
#

$HTTP["request-method"] =~ "GET|POST" {
	url.rewrite = (
		"^/kontakt" => "/cgi-bin/form.py",
		"^/kontakt/problem" => "/cgi-bin/form.py",
		"^/spenden" => "/cgi-bin/form.py",
		"^/mitmachen" => "/cgi-bin/form.py",
		"^/computer-beantragen/organisation" => "/cgi-bin/form.py",
		"^/computer-beantragen/privat" => "/cgi-bin/form.py",
		"^/hardware-spenden/organisation" => "/cgi-bin/form.py",
		# Note the actual POST endpoint is /hardware-spenden/privat/laptop, but the
		# form is served from /hardware-spenden/privat.
		"^/hardware-spenden/privat" => "/cgi-bin/form.py"
	)
}

$HTTP["url"] =~ "^/cgi-bin/" {
	alias.url += ( "/cgi-bin" => "@cgibin@" )

	static-file.exclude-extensions = ( ".py" )
  cgi.assign = ( ".py" => "@python@/bin/python" )
	cgi.execute-x-only = "enable"

	cgi.x-sendfile = "enable"
	cgi.x-sendfile-docroot = ( "@site@" )

	setenv.set-environment = (
		"SITE_DIRECTORY" => "@site@",
		"ZAMMAD_URL" => env.ZAMMAD_URL,
		"ZAMMAD_TOKEN" => env.ZAMMAD_TOKEN,
		"ZAMMAD_GROUP" => env.ZAMMAD_GROUP,
		"HCAPTCHA_SITE_KEY" => env.HCAPTCHA_SITE_KEY,
		"HCAPTCHA_SECRET_KEY" => env.HCAPTCHA_SECRET_KEY,
	)
}