lighttpd_vhost.conf

server.modules  += ( "mod_proxy" )
server.modules  += ( "mod_auth" )

auth.debug = 2
auth.backend = "plain"
auth.backend.plain.userfile = "/var/lighttpd/.lighttpdpassword"


$HTTP["host"] == "example.localch" {

 # Redirect HTTP to HTTPS
 $HTTP["scheme"] == "http" {
    $HTTP["host"] =~ ".*" {
      url.redirect = (".*" => "https://%0$0")
    }
  }

 # Basic Auth
 auth.require = ( "/" =>
  (
    "method" => "basic",
    "realm" => "Password protected area",
    "require" => "user=eps"
  )
 )

  # Document Root
  setenv.add-environment = ("fqdn" => "true")
  server.document-root        = "/var/www/html/example"

  # HTTPS Config
  $SERVER["socket"] == ":443" {
    ssl.engine = "enable"
    ssl.pemfile = "/etc/lighttpd/certs/example.pem"
    ssl.honor-cipher-order = "enable"
    ssl.cipher-list = "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"
    ssl.use-compression = "disable"
    ssl.use-sslv2 = "disable"
    ssl.use-sslv3 = "disable"
  }
}