4 ms·

I use thttpd when I don't need Apache. It also allows chroot(). I occasionally resort to CGI with it. https://acme.com/software/thttpd/ https://acme.com/softwa

• snvzz 8y ago
  I do like thttpd too, but chroot() is no replacement for pledge().
  • chasil 8y ago
    Agreed, but not everybody is lucky enough to run their core systems on OpenBSD. Some of us have to sling some Oracle for a living.
• stevekemp 8y ago
  I used to use thttpd, but it is showing its age a little due to lack of updates. For example one ommission that bit me is the lack of native-support for the X-Forwarded-For header, making it hard to use behind a reverse proxy. At the time I last looked the most common-patch for this didn't support IPv6 addresses which was a real show-stopper. Of course this was back in 2011 so things might have changed: https://blog.steve.fi/ipv6_and_thttpd.html https://blog.steve.fi/ipv6_and_thttpd.html The original author stopped accepting patches to thttpd back in 2004 though, unless something has changed recently it's a little hard to recommend it for general-purpose use. That's lead to divergence in features between a few distributions. (I run maybe 30 websites on one box. I run each one under a different UID, with a dedicated instance of lighttpd for each site - then I use haproxy/apache as the front-end. In the past I used thttpd, because I wanted things to be minimal, but I realized that thttpd was too minimal.)
  • snvzz 8y ago
    sthttpd is a maintained fork.