Init repo

2023-01-11 01:03:34 +01:00
parent 533a540a1d
commit 85930b7cac
33 changed files with 2389 additions and 0 deletions
--- a/default_configuration/xmpp/prosody.cfg.lua.example
+++ b/default_configuration/xmpp/prosody.cfg.lua.example
@@ -0,0 +1,132 @@
+---------- Server-wide settings ----------
+-- Settings in this section apply to the whole server and are the default settings
+-- for any virtual hosts
+
+-- This is a (by default, empty) list of accounts that are admins
+-- for the server. Note that you must create the accounts separately
+-- (see https://prosody.im/doc/creating_accounts for info)
+-- Example: admins = { "user1@example.com", "user2@example.net" }
+admins = { "admin@__DOMAIN__" }
+
+-- Drop privileges
+prosody_user = "_prosody"
+prosody_group = "_prosody"
+
+-- Enable POSIX-only options
+pidfile = "/var/prosody/prosody.pid"
+
+-- Enable use of libevent for better performance under high load
+-- For more information see: https://prosody.im/doc/libevent
+--use_libevent = true
+
+-- Prosody will always look in its source directory for modules, but
+-- this option allows you to specify additional locations where Prosody
+-- will look for modules first. For community modules, see https://modules.prosody.im/
+plugin_paths = { "/var/prosody/plugins" }
+
+-- This is the list of modules Prosody will load on startup.
+-- It looks for mod_modulename.lua in the plugins folder, so make sure that exists too.
+-- Documentation for bundled modules can be found at: https://prosody.im/doc/modules
+modules_enabled = {
+
+        -- Generally required
+                "roster"; -- Allow users to have a roster. Recommended ;)
+                "saslauth"; -- Authentication for clients and servers. Recommended if you want to log in.
+                "tls"; -- Add support for secure TLS on c2s/s2s connections
+                "dialback"; -- s2s dialback support
+                "disco"; -- Service discovery
+
+        -- Not essential, but recommended
+                "carbons"; -- Keep multiple clients in sync
+                "pep"; -- Enables users to publish their avatar, mood, activity, playing music and more
+                "bidi";
+                "private"; -- Private XML storage (for room bookmarks, etc.)
+                "blocklist"; -- Allow users to block communications with other users
+                "vcard4"; -- User profiles (stored in PEP)
+                --"vcard_legacy"; -- Conversion between legacy vCard and PEP Avatar, vcard
+                "limits"; -- Enable bandwidth limiting for XMPP connections
+                "smacks";
+        -- Nice to have
+                "version"; -- Replies to server version requests
+                "uptime"; -- Report how long server has been running
+                "time"; -- Let others know the time here on this server
+                "ping"; -- Replies to XMPP pings with pongs
+                -- "register"; -- Allow users to register on this server using a client and change passwords
+                "mam"; -- Store messages in an archive and allow users to access it
+                "csi_simple"; -- Simple Mobile optimizations
+
+        -- HTTP modules
+                "bosh"; -- Enable BOSH clients, aka "Jabber over HTTP"
+                "websocket"; -- XMPP over WebSockets
+                "http_files"; -- Serve static files from a directory over HTTP
+
+        -- Other specific functionality
+                "groups"; -- Shared roster support
+                "proxy65"; -- Enables a file transfer proxy service which clients behind NAT can use
+
+                -- cloud notify
+                "cloud_notify";
+                "cloud_notify_extensions";
+}
+
+
+modules_disabled = {
+}
+
+allow_registration = false
+
+-- Force clients to use encrypted connections? This option will
+-- prevent clients from authenticating unless they are using encryption.
+
+c2s_require_encryption = true
+
+-- Force servers to use encrypted connections? This option will
+-- prevent servers from authenticating unless they are using encryption.
+
+s2s_require_encryption = true
+
+-- Force certificate authentication for server-to-server connections?
+
+s2s_secure_auth = false
+
+-- Enable rate limits for incoming client and server connections
+
+limits = {
+  c2s = {
+    rate = "100kb/s";
+  };
+  s2sin = {
+    rate = "300kb/s";
+  };
+}
+
+-- Select the authentication backend to use. The 'internal' providers
+-- use Prosody's configured data storage to store the authentication data.
+
+authentication = "internal_hashed"
+
+-- Archiving configuration
+archive_expires_after = "1w" -- Remove archived messages after 1 week
+
+-- You can also configure messages to be stored in-memory only. For more
+-- archiving options, see https://prosody.im/doc/modules/mod_mam
+
+-- Logging configuration
+-- For advanced logging see https://prosody.im/doc/logging
+log = {
+        info = "/var/prosody/prosody.log"; -- Change 'info' to 'debug' for verbose logging
+        error = "/var/prosody/prosody.err";
+}
+
+-- Location of directory to find certificates in (relative to main config file):
+certificates = "/var/prosody/"
+
+
+-- WebSocket configuration (mod_websocket)
+consider_websocket_secure = true
+
+
+------ Components ------
+-- You can specify components to add hosts that provide special services,
+-- like multi-user conferences, and transports.
+include "virtualHosts/*.conf"