# Install bozohttpd with Homebrew, Nix

Small and secure http version 1.1 server. Version 20260503 via Homebrew; verified 2026-05-10.

## Install

```sh
sudo av install brew:bozohttpd
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install bozohttpd
```

  Evidence: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#bozohttpd
```

  Evidence: nixpkgs package indexes: pkgs/by-name/bo/bozohttpd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:bozohttpd
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/bozohttpd>
- **Version:** 20260503
- **Source summary:** Small and secure http version 1.1 server
- **Homepage:** <https://pkgsrc.se/www/bozohttpd>
- **Repository:** <https://github.com/NetBSD/src/tree/trunk/libexec/httpd>
- **Upstream docs:** <https://man.netbsd.org/bozohttpd.8>
- **License:** BSD-2-Clause
- **Source archive:** <https://cdn.netbsd.org/pub/pkgsrc/distfiles/LOCAL_PORTS/bozohttpd-20260503.tar.bz2>
- **Last updated:** 2026-05-10T16:49:33Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- bozohttpd (cli)
- bozohttpd (alias)

## Dependencies

- openssl@4

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 20260503
- Package-manager updated: 2026-05-10
- Local data: ok
- Upstream repository: https://pkgsrc.se/www/bozohttpd
- info: Release/tag comparison is only available for GitHub repositories.
## Project history and usage

bozohttpd is NetBSD's small HTTP server, documented as a simple, relatively featureless server focused on simplicity and security. Its manual records a history from early Perl implementations through a C rewrite and later NetBSD integration.

### Project history

The official manual says bozohttpd was first written in Perl, based on another Perl HTTP server named tinyhttpd, then rewritten from scratch in Perl and again in C. Matthew R. Green is listed as the author, with a long contributor list from the NetBSD community.

From version 20060517, bozohttpd became integrated into NetBSD. The NetBSD source tree keeps it under libexec/httpd, and the CHANGES file documents an ongoing maintenance stream of portability, CGI, TLS, directory listing, authentication, MIME type, and security fixes.

### Adoption history

The main adoption path is operating-system integration rather than standalone application hype: bozohttpd ships as a NetBSD component and is packaged by systems such as Homebrew and Nix according to the input package facts.

Its history shows continued downstream-driven maintenance. The CHANGES file names fixes and contributions for FreeBSD portability, Linux builds, Debian bug reports, OpenSSL changes, and NetBSD problem reports.

### How it is used

bozohttpd serves static files and optional CGI-style dynamic content with a deliberately small feature set. The manual covers daemon mode, virtual hosts, TLS options, directory indexing, basic authentication, CGI mappings, and Lua script handling.

The package is most useful when a small local or system HTTP daemon is enough and a larger web server would be excessive. Its `.htpasswd` support explains the credentials-file curation for basic authentication.

### Why package nerds care

bozohttpd matters to package nerds because it is a BSD base-system web server that is still portable enough to appear as a package elsewhere. It is the kind of tool that exposes the line between operating-system component, inetd-era utility, and standalone formula.

Its CHANGES file is also a compact history of long-tail web-server maintenance: path traversal hardening, auth bypass fixes, CGI corner cases, TLS defaults, and MIME updates over decades.

### Timeline

- Pre-2006: Manual records Perl origins, a fresh Perl rewrite, and a later C rewrite.
- 2006: Version 20060517 integrated bozohttpd into NetBSD.
- 2010: Internal interfaces were reworked so parts could be used as a library, and Lua bindings were added.
- 2018: CHANGES records fixes for `.htpasswd` and special-file bypass issues.
- 2026: Manual documents bozohttpd version 20260508.

### Related projects

- The manual names tinyhttpd as the Perl HTTP server that influenced the earliest bozohttpd implementation.
- Related package-manager neighbors include other compact HTTP daemons such as thttpd, darkhttpd, busybox httpd, and NetBSD's own inetd-oriented tooling.

### Sources

- <https://man.netbsd.org/bozohttpd.8>
- <https://raw.githubusercontent.com/NetBSD/src/trunk/libexec/httpd/CHANGES>
- source_facts.package-manager


## Security Notes

No matching local secret-handling manifest was found for bozohttpd. Nucleus package metadata is still published here so future coverage has a stable package URL.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Credential files

- Unix: .htpasswd
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** bozohttpd
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## Other Package-Manager Records

- Nix - bozohttpd: normalized package name match | nixpkgs package indexes: pkgs/by-name/bo/bozohttpd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Related links

- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Web development packages](https://www.automicvault.com/pkg/web-dev-tools/) - Matched web development metadata.
- [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider.
- [openssl@4](https://www.automicvault.com/pkg/brew/openssl-4/) - Runtime dependency declared by Homebrew.
- [ferron](https://www.automicvault.com/pkg/brew/ferron/) - Shares av.db curated category or tags: cli, http, networking, web-server.
- [h2o](https://www.automicvault.com/pkg/brew/h2o/) - Shares av.db curated category or tags: cli, http, networking, web-server.
- [httpd](https://www.automicvault.com/pkg/brew/httpd/) - Shares av.db curated category or tags: cli, http, networking, web-server.
- [lighttpd](https://www.automicvault.com/pkg/brew/lighttpd/) - Shares av.db curated category or tags: cli, daemon, networking, web-server.
- [nginx](https://www.automicvault.com/pkg/brew/nginx/) - Shares av.db curated category or tags: cli, http, networking, web-server.
- [static-web-server](https://www.automicvault.com/pkg/brew/static-web-server/) - Shares av.db curated category or tags: cli, http, networking, web-server.
- [yaws](https://www.automicvault.com/pkg/brew/yaws/) - Shares av.db curated category or tags: cli, http, networking, web-server.
- [zurl](https://www.automicvault.com/pkg/brew/zurl/) - Shares av.db curated category or tags: cli, daemon, http, networking.
- [shellinabox](https://www.automicvault.com/pkg/brew/shellinabox/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, http, networking, openssl, openssl-4.

## Combined YAML source

View the package source record on GitHub. [combined/bozohttpd.yml](https://github.com/automic-vault/db/blob/main/combined/bozohttpd.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
