Lighttpd

server.modules
modules to load

the order of the modules is important.

The modules are executed in the order as they are specified. Loading mod_auth AFTER mod_fastcgi might disable authentication for fastcgi backends (if check-local is disabled).

As auth should be done first, move it before all executing modules (like proxy, fastcgi, scgi and cgi).

rewrites, redirects and access should be first, followed by auth and the docroot plugins.

Afterwards the external handlers like fastcgi, cgi, scgi and proxy and at the bottom the post-processing plugins like mod_accesslog.

Example:

{{{
server.modules          = ( "mod_rewrite",
                            "mod_redirect",
                            "mod_alias",
                            "mod_access",
                            "mod_auth",
                            "mod_status",
                            "mod_simple_vhost",
                            "mod_evhost",
                            "mod_userdir",
                            "mod_secdownload",
                            "mod_fastcgi",
                            "mod_proxy",
                            "mod_cgi",
                            "mod_ssi",
                            "mod_compress",
                            "mod_usertrack",
                            "mod_expire",
                            "mod_rrdtool",
                            "mod_accesslog" )
     }}}

Starting with lighttpd 1.4.0 three default modules are loaded automaticly:

• mod_indexfile
• mod_dirlisting
• mod_staticfile