I'm currently using Apache 2 for my web servers, but I want to switch to
something else. Apache is too complex, thus bloated. So what I need -

In Devuan package repos.
Open source of some description.
Very secure out of the box.
Minimum of bloat.
Really good and fast at serving static files, like graphics.
Fast at everything else to.
Using FCGI directly for anything complex, including PHP stuff.

For bonus points -

Written in C, maybe including parts in assembler so long as it can be built for various CPU types.
Lua scripting support of some sort.
SSI, or at least mostly compatible with one of the non standards for that.
Multi platform.

I had a look at Red Bean, but it's source code is a bit messy when I added SSI.

Any suggestions?

--
A big old stinking pile of genius that no one wants
coz there are too many silver coated monkeys in the world.