= Notes for the kopano-webapp-lighttpd package = This package contains a really simply and in some circumstances ready to use configuration for the kopano-webapp together with the Lighttpd webserver as linked configuration to /etc/lighttpd/conf-available/50-kopano-webapp.conf. The provided configuration for kopano-webapp is only providing a extra URL alias and has no additional extra VHOST or SSL configuration inside. That configuration makes kopano-webapp available under the URL '[webserver]/webapp'. To not conflict with possible existing running configurations for other sites and vhosts the provided Lighttpd configuration isn't activated by default. Please note due the fact the kopano-webapp is using sensible data like account names and passwords the prepared configuration shouldn't enabled until https transport for the webserver is properly configured! Kopano has introduced a PHP check into kopano-webapp since 3.4.4 to ensure that kopano-webapp is not accessible by accident over a not encrypted http web server configuration! Using http only would lead to a "HTTP Error 400 - Bad Request" if you proceed further without adjustments to the configuration of kopano-webapp for lighttpd. You will see the above error in your webbrowser and a log entry in /varlog/lighttpd/error.log like this: 2018-12-20 10:10:24: (mod_fastcgi.c.425) FastCGI-stderr: Rejected insecure request as configuration for 'INSECURE_COOKIES' is false. You can turn off this check by modify the file /etc/kopano/webapp/config.php in line 39. // Set to 'true' to disable secure session cookies and to allow log-in without HTTPS. define("INSECURE_COOKIES", false); It's strongly recommend NOT to do this! If you running a working SSL configuration or really know what you are doing you can enable the kopano-webapp config for lighttpd by the following steps. $ sudo lighty-enable-mod kopano-webapp fastcgi-php $ sudo service lighttpd force-reload or $ sudo systemctl reload lighttpd Usage of kopano-webapp in more complex environments --------------------------------------------------- This requires typically more elaborate configurations in all parts of lighttpd which Debian in part of the kopano-webapp-lighttpd package can't provide for now. If you can provide some helpful hints or ready to use configurations for providing some more convenient user experience please let us know and get in contact with "Giraffe Maintainers ". -- Carsten Schoenert Thu, 20 December 2018 11:44:00 +0200