diff --git a/configure.ac b/configure.ac
index 52f1952cd..7e06a6d84 100644
--- a/configure.ac
+++ b/configure.ac
@@ -3909,7 +3909,14 @@ then
     AM_CFLAGS="$AM_CFLAGS -DHAVE_LIGHTY -DHAVE_WOLFSSL_SSL_H=1"
     AM_CFLAGS="$AM_CFLAGS -DHAVE_EX_DATA"
     AM_CFLAGS="$AM_CFLAGS -DOPENSSL_ALL"
+    # recommended
     AM_CFLAGS="$AM_CFLAGS -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_COMP"
+    AM_CFLAGS="$AM_CFLAGS -DNO_OLD_TLS"
+    AM_CFLAGS="$AM_CFLAGS -DSINGLE_THREADED"
+    ENABLED_SINGLETHREADED="yes"
+    # w/ lighttpd 1.4.56 once WolfSSL is updated to expose non-filesystem funcs
+    #AM_CFLAGS="$AM_CFLAGS -DNO_FILESYSTEM"
+    #ENABLED_FILESYSTEM=no
 fi
 
 if test "$ENABLED_NGINX" = "yes"