101 lines
2.7 KiB
Plaintext
101 lines
2.7 KiB
Plaintext
|
VirtualHost "__DOMAIN__"
|
||
|
|
enable = true
|
||
|
|
|
||
|
|
|
||
|
|
ssl = {
|
||
|
|
key = "/etc/prosody/certs/__DOMAIN__.key";
|
||
|
|
certificate = "/etc/prosody/certs/__DOMAIN__.crt";
|
||
|
|
-- Configuration Avancée
|
||
|
|
protocol = "tlsv1_2+";
|
||
|
|
dhparam = "/etc/prosody/certs/dh-2048.pem";
|
||
|
|
ciphers = "HIGH+kEECDH:!RSA:!SRP:!PSK:!3DES:!aNULL";
|
||
|
|
options = { cipher_server_preference = true, no_compression = true, cipher_server_preference = true };
|
||
|
|
|
||
|
|
}
|
||
|
|
archive_expires_after = "15d";
|
||
|
|
|
||
|
|
-- Discovery items
|
||
|
|
disco_items = {
|
||
|
|
{ "muc.__DOMAIN__" },
|
||
|
|
{ "pubsub.__DOMAIN__" },
|
||
|
|
{ "upload.__DOMAIN__" },
|
||
|
|
};
|
||
|
|
|
||
|
|
contact_info = {
|
||
|
|
abuse = { "mailto:abuse@__DOMAIN__", "xmpp:admin@__DOMAIN__" };
|
||
|
|
admin = { "mailto:root@$__DOMAIN__", "xmpp:admin@__DOMAIN__" };
|
||
|
|
};
|
||
|
|
|
||
|
|
-- BOSH configuration (mod_bosh)
|
||
|
|
consider_bosh_secure = true
|
||
|
|
cross_domain_bosh = true
|
||
|
|
|
||
|
|
bosh_ports = {
|
||
|
|
{
|
||
|
|
port = 5280;
|
||
|
|
path = "http-bind";
|
||
|
|
},
|
||
|
|
{
|
||
|
|
port = 5281;
|
||
|
|
path = "http-bind";
|
||
|
|
ssl = {
|
||
|
|
certificate = "/etc/prosody/certs/__DOMAIN__.crt";
|
||
|
|
key = "/etc/prosody/certs/__DOMAIN__.key";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
http_ports = { 5280 }
|
||
|
|
http_interfaces = { "localhost" }
|
||
|
|
|
||
|
|
https_ports = { 5281 }
|
||
|
|
https_interfaces = { "localhost" }
|
||
|
|
|
||
|
|
https_ssl = {
|
||
|
|
certificate = "/etc/prosody/certs/__DOMAIN__.crt";
|
||
|
|
key = "/etc/prosody/certs/__DOMAIN__.key";
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
------ Components ------
|
||
|
|
-- You can specify components to add hosts that provide special services,
|
||
|
|
-- like multi-user conferences, and transports.
|
||
|
|
|
||
|
|
--Component "proxy.__DOMAIN__" "proxy65"
|
||
|
|
-- proxy65_address = ""
|
||
|
|
-- proxy65_acl = { "" }
|
||
|
|
|
||
|
|
Component "muc.__DOMAIN__" "muc"
|
||
|
|
name = "__DOMAIN__ Chatrooms"
|
||
|
|
|
||
|
|
modules_enabled = {
|
||
|
|
"muc_mam";
|
||
|
|
"muc_limits";
|
||
|
|
"muc_log";
|
||
|
|
"vcard_muc";
|
||
|
|
}
|
||
|
|
|
||
|
|
muc_log_by_default = true
|
||
|
|
muc_log_presences = false
|
||
|
|
log_all_rooms = false
|
||
|
|
muc_log_expires_after = "1w"
|
||
|
|
muc_log_cleanup_interval = 4 * 60 * 60
|
||
|
|
|
||
|
|
muc_event_rate = 0.5
|
||
|
|
muc_burst_factor = 10
|
||
|
|
room_default_config = {
|
||
|
|
logging = true,
|
||
|
|
persistent = true
|
||
|
|
};
|
||
|
|
|
||
|
|
|
||
|
|
---Set up a PubSub server
|
||
|
|
Component "pubsub.__DOMAIN__" "pubsub"
|
||
|
|
name = "__DOMAIN__ Publish/Subscribe"
|
||
|
|
unrestricted_node_creation = true -- Anyone can create a PubSub node (from any server)
|
||
|
|
---Set up a HTTP Upload service
|
||
|
|
Component "upload.__DOMAIN__" "http_upload_external"
|
||
|
|
name = "__DOMAIN__ Sharing Service"
|
||
|
|
http_upload_external_base_url = "https://upload.__DOMAIN__/share.php/"
|
||
|
|
http_upload_external_secret = "__xmpp_passphrase_for_filesuploads__"
|