Lighttpd

I am not a huge fan of inline shell scripting. include_shell should be used to run a script. Or, you could more simply include "vhosts.d/*.conf" and avoid directories ending ".conf" under vhost.d/

Here is a quick patch, which should work for your case, but does not cover the case where the include_shell cmd contains single-quote itself. I'll work on a more-inclusive patch this weekend.

-- a/src/configfile.c
+++ b/src/configfile.c
@@ -1411,6 +1411,8 @@ int config_parse_cmd(server *srv, config_t *context, const char *cmd) {
        buffer *source;
        buffer *out = srv->tmp_buf;
        char *oldpwd;
+       const char *shell = getenv("SHELL");
+       if (NULL == shell) shell = "/bin/sh";

        if (NULL == (oldpwd = getCWD())) {
                log_error_write(srv, __FILE__, __LINE__, "s",
@@ -1428,8 +1430,12 @@ int config_parse_cmd(server *srv, config_t *context, const char *cmd) {
        }

        source = buffer_init_string(cmd);
+       buffer_copy_string_len(out, shell, strlen(shell));
+       buffer_append_string_len(out, CONST_STR_LEN(" -c '"));
+       buffer_append_string_buffer(out, source);
+       buffer_append_string_len(out, CONST_STR_LEN("'"));

-       fp = popen(cmd, "r");
+       fp = popen(out->ptr, "r");
        if (NULL == fp) {
                log_error_write(srv, __FILE__, __LINE__, "SSss",
                                "popen \"", cmd, "\"failed:", strerror(errno));