public

2026-07-28 18:12:54 +02:00
commit 336b36c8e1
37 changed files with 2332 additions and 0 deletions
@@ -0,0 +1,61 @@
+plugin_paths = { "/usr/local/lib/prosody/custom-modules/" };
+
+-- table of enabled modules
+-- local mods_enabled = {
+modules_enabled = {
+    -- Generally required
+    "roster"; -- Allow users to have a roster. Recommended ;)
+    "saslauth"; -- Authentication for clients and servers. Recommended if you want to log in.
+    "tls"; -- Add support for secure TLS on c2s/s2s connections
+    "dialback"; -- s2s dialback support
+    "disco"; -- Service discovery
+
+    -- Not essential, but recommended
+    "blocklist"; -- Simple modern protocol for blocking remote JIDs (XEP-0191)
+    "private"; -- Private XML storage (for room bookmarks, etc.)
+    "vcard4"; -- Allow users to set vCards
+    "vcard_legacy"; -- Support older clients
+    "mam"; -- Message Archive (XEP-0313)
+    "carbons"; -- Share and sync conversations (XEP-0280)
+    "csi_simple"; -- Buffer unimportant traffic for simple optimisation for clients using state indication
+    "limits"; -- Enable bandwidth limiting for XMPP connections
+
+    -- Nice to have
+    "version"; -- Replies to server version requests
+    "uptime"; -- Report how long server has been running
+    "time"; -- Let others know the time here on this server
+    "ping"; -- Replies to XMPP pings with pongs
+    "pep"; -- Enables users to publish their mood, activity, playing music and more
+    "register"; -- Allow users to register on this server using a client and change passwords
+    --"muc"; -- [Loaded as component, therefore commented here] Multi-user chats (XEP-0045)
+
+    -- Admin interfaces
+    "admin_adhoc"; -- Allows administration via an XMPP client that supports ad-hoc commands
+    --"admin_telnet"; -- Opens telnet console interface on localhost port 5582
+
+    -- HTTP modules
+    "bosh"; -- Enable BOSH clients, aka "Jabber over HTTP"
+    "websocket"; -- Enable mod_websocket
+    --"http_files"; -- Serve static files from a directory over HTTP
+
+    -- Other specific functionality
+    "posix"; -- POSIX functionality, sends server to background, enables syslog, etc.
+    --"groups"; -- Shared roster support
+    "announce"; -- Send announcement to all online users
+    "welcome"; -- Welcome users who register accounts
+    --"watchregistrations"; -- Alert admins of registrations
+    --"motd"; -- Send a message to users when they log in
+    --"legacyauth"; -- Legacy authentication. Only used by some old clients and bots.
+    "lastactivity";
+    "server_contact_info"; -- This module lets you advertise various contact addresses for your XMPP service via XEP-0157.
+};
+
+-- modules_enabled = mods_enabled;
+
+-- These modules are auto-loaded, but should you want
+-- to disable them then uncomment them here:
+modules_disabled = {
+    -- "offline"; -- Store offline messages
+    -- "c2s"; -- Handle client connections
+    -- "s2s"; -- Handle server-to-server connections
+};
@@ -0,0 +1,33 @@
+default_storage = "sql"
+
+sql = {
+  driver = os.getenv("DB_DRIVER") or "SQLite3";
+  database = os.getenv("DB_DATABASE") or "prosody.sqlite";
+  host = os.getenv("DB_HOST");
+  port = os.getenv("DB_PORT");
+  username = os.getenv("DB_USERNAME");
+  password = os.getenv("DB_PASSWORD");
+}
+
+-- make 0.10-distributed mod_mam use sql store
+archive_store = "archive2" -- Use the same data store as prosody-modules mod_mam
+
+storage = {
+  -- this makes mod_mam use the sql storage backend
+  archive2 = "sql";
+}
+
+-- https://modules.prosody.im/mod_mam.html
+archive_expires_after = "1y"
+
+-- bandwith limits
+--limits = {
+    --c2s = {
+        --rate = "10kb/s";
+    --};
+    --s2sin = {
+        --rate = "30kb/s";
+    --};
+--}
+
+http_max_content_size = os.getenv("HTTP_MAX_CONTENT_SIZE") or 1024 * 1024 * 10 -- Default is 10MB
@@ -0,0 +1,17 @@
+local function _split(s, sep)
+	if not s then return nil; end
+	sep = sep or ",";
+	local parts = {};
+	for part in s:gmatch("[^"..sep.."]+") do
+		parts[#parts+1] = part;
+	end
+	return parts;
+end
+
+e2e_policy_chat = os.getenv("E2E_POLICY_CHAT")
+e2e_policy_muc = os.getenv("E2E_POLICY_MUC")
+e2e_policy_whitelist = _split(os.getenv("E2E_POLICY_WHITELIST"), ", ")
+e2e_policy_message_optional_chat = "For security reasons, OMEMO, OTR or PGP encryption is STRONGLY recommended for conversations on this server."
+e2e_policy_message_required_chat = "For security reasons, OMEMO, OTR or PGP encryption is required for conversations on this server."
+e2e_policy_message_optional_muc = "For security reasons, OMEMO, OTR or PGP encryption is STRONGLY recommended for MUC on this server."
+e2e_policy_message_required_muc = "For security reasons, OMEMO, OTR or PGP encryption is required for MUC on this server."
@@ -0,0 +1,28 @@
+local function _split(s, sep)
+	if not s then return nil; end
+	sep = sep or ",";
+	local parts = {};
+	for part in s:gmatch("[^"..sep.."]+") do
+		parts[#parts+1] = part;
+	end
+	return parts;
+end
+
+local domain = os.getenv("DOMAIN")
+local abuse = os.getenv("SERVER_CONTACT_INFO_ABUSE") or "xmpp:abuse@" .. domain
+local admin = os.getenv("SERVER_CONTACT_INFO_ADMIN") or "xmpp:admin@" .. domain
+local feedback = os.getenv("SERVER_CONTACT_INFO_FEEDBACK") or "xmpp:feedback@" .. domain
+local sales = os.getenv("SERVER_CONTACT_INFO_SALES") or "xmpp:sales@" .. domain
+local security = os.getenv("SERVER_CONTACT_INFO_SECURITY") or "xmpp:security@" .. domain
+local support = os.getenv("SERVER_CONTACT_INFO_SUPPORT") or "xmpp:support@" .. domain
+
+contact_info = {
+  abuse = _split(abuse, ", ");
+  admin = _split(admin, ", ");
+  feedback = _split(feedback, ", ");
+  sales = _split(sales, ", ");
+  security = _split(security, ", ");
+  support = _split(support, ", ");
+}
+
+welcome_message = "Kaixo $username, ongi etorri $host IM zerbitzura! Mesedez irakurri itzazu ondorengo <a href='https://lainoa.eus/terms/tos.html'>Erabilpen baldintzak</a>."
@@ -0,0 +1,46 @@
+local domain = os.getenv("DOMAIN")
+local domain_http_upload = os.getenv("DOMAIN_HTTP_UPLOAD")
+local domain_muc = os.getenv("DOMAIN_MUC")
+local domain_proxy = os.getenv("DOMAIN_PROXY")
+local domain_pubsub = os.getenv("DOMAIN_PUBSUB")
+
+-- XEP-0368: SRV records for XMPP over TLS
+-- https://compliance.conversations.im/test/xep0368/
+legacy_ssl_ssl = {
+	certificate = "certs/" .. domain .. "/fullchain.pem";
+	key = "certs/" .. domain .. "/privkey.pem";
+}
+legacy_ssl_ports = { 5223 }
+
+-- https://prosody.im/doc/certificates#service_certificates
+-- https://prosody.im/doc/ports#ssl_configuration
+https_ssl = {
+	certificate = "certs/" .. domain .. "/fullchain.pem";
+	key = "certs/" .. domain .. "/privkey.pem";
+}
+
+VirtualHost (domain)
+
+-- Set up a http file upload 
+Component (domain_http_upload) "http_file_share"
+	http_file_share_expires_after = 60 * 60 * 24 * 7 -- a week in seconds
+	local size_limit = os.getenv("HTTP_FILE_SHARE_SIZE_LIMIT") or 10 * 1024 * 1024 -- Default is 10MB
+	http_file_share_size_limit = size_limit
+	http_file_share_daily_quota = os.getenv("HTTP_FILE_SHARE_DAILY_QUOTA") or 10 * size_limit -- Default is 10x the size limit
+
+Component (domain_muc) "muc"
+	name = "Prosody Chatrooms"
+	restrict_room_creation = false
+	max_history_messages = 20
+	modules_enabled = {
+		"muc_mam",
+		"vcard_muc"
+	}
+
+-- Set up a SOCKS5 bytestream proxy for server-proxied file transfers
+Component (domain_proxy) "proxy65"
+	proxy65_address = domain_proxy
+	proxy65_acl = { domain }
+
+-- Implements a XEP-0060 pubsub service.
+Component (domain_pubsub) "pubsub"