From 4218e82baae4ddf594fa483133748990c97e9f71 Mon Sep 17 00:00:00 2001
From: kulikov-a <36099472+kulikov-a@users.noreply.github.com>
Date: Wed, 22 Feb 2023 15:29:27 +0300
Subject: [PATCH] security/acme: lighty minor config fixes

use 'deflate.' options to enable compression
mod_dirlisting is disabled by default
---
 .../OPNsense/AcmeClient/lighttpd-acme-challenge.conf   | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/security/acme-client/src/opnsense/service/templates/OPNsense/AcmeClient/lighttpd-acme-challenge.conf b/security/acme-client/src/opnsense/service/templates/OPNsense/AcmeClient/lighttpd-acme-challenge.conf
index 5f3cf31d2..b59553e26 100644
--- a/security/acme-client/src/opnsense/service/templates/OPNsense/AcmeClient/lighttpd-acme-challenge.conf
+++ b/security/acme-client/src/opnsense/service/templates/OPNsense/AcmeClient/lighttpd-acme-challenge.conf
@@ -72,18 +72,16 @@ $SERVER["socket"]  == "[::1]:{{OPNsense.AcmeClient.settings.challengePort}}" { }
 # to help the rc.scripts
 server.pid-file = "/var/run/lighttpd-acme-challenge.pid"
 
-# virtual directory listings
-server.dir-listing = "disable"
-
 # enable debugging
 debug.log-request-header   = "disable"
 debug.log-response-header  = "disable"
 debug.log-request-handling = "disable"
 debug.log-file-not-found   = "disable"
 
-# gzip compression
-compress.cache-dir = "/tmp/acmelighttpdcompress/"
-compress.filetype  = ("text/plain","text/css", "text/xml", "text/javascript" )
+# enable compression
+deflate.cache-dir = "/tmp/acmelighttpdcompress/"
+deflate.mimetypes = ("text/plain", "text/css", "text/xml", "text/javascript")
+deflate.allowed-encodings = ("br", "gzip", "deflate")
 
 server.max-request-size = 4096
 server.tag = "lighttpd/ACME"