The line you posted from your lighttpd error log with “server started” is in localtime.
Where is lighttpd still stuck in UTC? The accesslog?
As I described above the accesslog uses localtime_r() if at build time of the lighttpd package, the lighttpd build detected tm_gmtoff, otherwise the accesslog uses gmtime_r() and date output is in UTC.
On my (Fedora) system:
$ objdump -T /usr/lib64/lighttpd/mod_accesslog.so | grep time_r
0000000000000000 DF *UND* 0000000000000000 (GLIBC_2.2.5) localtime_r
What is the result on your system? Is it localtime_r or gmtime_r?
Not likely.