Merecat Httpd – A Tiny (~140 KiB) Web Server with HTTPS and PHP Support

Written in C, with clean and thorough source code and zero (or near-zero) 3rd party dependencies.

Impressive, though I wonder what kind of security review and testing have been performed. The code is beautiful but quite a lot of surface area with so many #ifdef's.

As for the PHP support, does it only support php-cgi?