v1.2.9

2024-03-01 12:50:08 +01:00
commit 656991b263
31 changed files with 2180 additions and 0 deletions
@@ -0,0 +1,56 @@
+plugin_paths = { "/usr/local/lib/prosody/custom-modules/" };
+
+modules_enabled = {
+    -- Generally required
+    "roster"; -- Allow users to have a roster. Recommended ;)
+    "saslauth"; -- Authentication for clients and servers. Recommended if you want to log in.
+    "tls"; -- Add support for secure TLS on c2s/s2s connections
+    "dialback"; -- s2s dialback support
+    "disco"; -- Service discovery
+
+    -- Not essential, but recommended
+    "blocklist"; -- Simple modern protocol for blocking remote JIDs (XEP-0191)
+    "private"; -- Private XML storage (for room bookmarks, etc.)
+    "vcard4"; -- Allow users to set vCards
+    "vcard_legacy"; -- Support older clients
+    "mam"; -- Message Archive (XEP-0313)
+    "carbons"; -- Share and sync conversations (XEP-0280)
+    "csi_simple"; -- Buffer unimportant traffic for simple optimisation for clients using state indication
+    "limits"; -- Enable bandwidth limiting for XMPP connections
+
+    -- Nice to have
+    "version"; -- Replies to server version requests
+    "uptime"; -- Report how long server has been running
+    "time"; -- Let others know the time here on this server
+    "ping"; -- Replies to XMPP pings with pongs
+    "pep"; -- Enables users to publish their mood, activity, playing music and more
+    "register"; -- Allow users to register on this server using a client and change passwords
+    --"muc"; -- [Loaded as component, therefore commented here] Multi-user chats (XEP-0045)
+
+    -- Admin interfaces
+    "admin_adhoc"; -- Allows administration via an XMPP client that supports ad-hoc commands
+    --"admin_telnet"; -- Opens telnet console interface on localhost port 5582
+
+    -- HTTP modules
+    --"bosh"; -- Enable BOSH clients, aka "Jabber over HTTP"
+    --"http_files"; -- Serve static files from a directory over HTTP
+
+    -- Other specific functionality
+    "posix"; -- POSIX functionality, sends server to background, enables syslog, etc.
+    --"groups"; -- Shared roster support
+    "announce"; -- Send announcement to all online users
+    --"welcome"; -- Welcome users who register accounts
+    --"watchregistrations"; -- Alert admins of registrations
+    --"motd"; -- Send a message to users when they log in
+    --"legacyauth"; -- Legacy authentication. Only used by some old clients and bots.
+    "lastactivity";
+    "server_contact_info"; -- This module lets you advertise various contact addresses for your XMPP service via XEP-0157.
+};
+
+-- These modules are auto-loaded, but should you want
+-- to disable them then uncomment them here:
+modules_disabled = {
+    -- "offline"; -- Store offline messages
+    -- "c2s"; -- Handle client connections
+    -- "s2s"; -- Handle server-to-server connections
+};
@@ -0,0 +1,31 @@
+default_storage = "sql"
+
+sql = {
+  driver = os.getenv("DB_DRIVER");
+  database = os.getenv("DB_DATABASE");
+  host = os.getenv("DB_HOST");
+  port = os.getenv("DB_PORT");
+  username = os.getenv("DB_USERNAME");
+  password = os.getenv("DB_PASSWORD");
+}
+
+-- make 0.10-distributed mod_mam use sql store
+archive_store = "archive2" -- Use the same data store as prosody-modules mod_mam
+
+storage = {
+  -- this makes mod_mam use the sql storage backend
+  archive2 = "sql";
+}
+
+-- https://modules.prosody.im/mod_mam.html
+archive_expires_after = "1y"
+
+-- bandwith limits
+limits = {
+    c2s = {
+        rate = "10kb/s";
+    };
+    s2sin = {
+        rate = "30kb/s";
+    };
+}
@@ -0,0 +1,9 @@
+local stringy = require "stringy" 
+
+e2e_policy_chat = os.getenv("E2E_POLICY_CHAT")
+e2e_policy_muc = os.getenv("E2E_POLICY_MUC")
+e2e_policy_whitelist = stringy.split(os.getenv("E2E_POLICY_WHITELIST"), ", ")
+e2e_policy_message_optional_chat = "For security reasons, OMEMO, OTR or PGP encryption is STRONGLY recommended for conversations on this server."
+e2e_policy_message_required_chat = "For security reasons, OMEMO, OTR or PGP encryption is required for conversations on this server."
+e2e_policy_message_optional_muc = "For security reasons, OMEMO, OTR or PGP encryption is STRONGLY recommended for MUC on this server."
+e2e_policy_message_required_muc = "For security reasons, OMEMO, OTR or PGP encryption is required for MUC on this server."
@@ -0,0 +1,12 @@
+local stringy = require "stringy" 
+
+contact_info = {
+  abuse = stringy.split(os.getenv("SERVER_CONTACT_INFO_ABUSE"), ", ");
+  admin = stringy.split(os.getenv("SERVER_CONTACT_INFO_ADMIN"), ", ");
+  feedback = stringy.split(os.getenv("SERVER_CONTACT_INFO_FEEDBACK"), ", ");
+  sales = stringy.split(os.getenv("SERVER_CONTACT_INFO_SALES"), ", ");
+  security = stringy.split(os.getenv("SERVER_CONTACT_INFO_SECURITY"), ", ");
+  support = stringy.split(os.getenv("SERVER_CONTACT_INFO_SUPPORT"), ", ");
+}
+
+welcome_message = "Kaixo $username, ongi etorri $host IM zerbitzura! Mesedez irakurri itzazu ondorengo <a href='https://lainoa.eus/terms/tos.html'>Erabilpen baldintzak</a>."
@@ -0,0 +1,43 @@
+local domain = os.getenv("DOMAIN")
+local domain_http_upload = os.getenv("DOMAIN_HTTP_UPLOAD")
+local domain_muc = os.getenv("DOMAIN_MUC")
+local domain_proxy = os.getenv("DOMAIN_PROXY")
+local domain_pubsub = os.getenv("DOMAIN_PUBSUB")
+
+-- XEP-0368: SRV records for XMPP over TLS
+-- https://compliance.conversations.im/test/xep0368/
+legacy_ssl_ssl = {
+	certificate = "certs/" .. domain .. "/fullchain.pem";
+	key = "certs/" .. domain .. "/privkey.pem";
+}
+legacy_ssl_ports = { 5223 }
+
+-- https://prosody.im/doc/certificates#service_certificates
+-- https://prosody.im/doc/ports#ssl_configuration
+https_ssl = {
+	certificate = "certs/" .. domain .. "/fullchain.pem";
+	key = "certs/" .. domain .. "/privkey.pem";
+}
+
+VirtualHost (domain)
+
+-- Set up a http file upload because proxy65 is not working in muc
+Component (domain_http_upload) "http_upload"
+	http_upload_expire_after = 60 * 60 * 24 * 7 -- a week in seconds
+
+Component (domain_muc) "muc"
+	name = "Prosody Chatrooms"
+	restrict_room_creation = false
+	max_history_messages = 20
+	modules_enabled = {
+		"muc_mam",
+		"vcard_muc"
+	}
+
+-- Set up a SOCKS5 bytestream proxy for server-proxied file transfers
+Component (domain_proxy) "proxy65"
+	proxy65_address = domain_proxy
+	proxy65_acl = { domain }
+
+-- Implements a XEP-0060 pubsub service.
+Component (domain_pubsub) "pubsub"