50 lines
1.4 KiB
INI
50 lines
1.4 KiB
INI
[Unit]
|
|
Description=Prosody XMPP Server
|
|
After=network-online.target prosody-pro-network.service
|
|
Wants=network-online.target
|
|
|
|
[Container]
|
|
Image=localhost/prosody/xmpp:0.12.5
|
|
|
|
ContainerName=prosody-server
|
|
NetworkAlias=server
|
|
Network=prosody-pro.network
|
|
|
|
PublishPort=5000:5000
|
|
PublishPort=5222:5222
|
|
PublishPort=5223:5223
|
|
PublishPort=5269:5269
|
|
PublishPort=5281:5281
|
|
|
|
Volume=%h/podman/prosody-pro/certs:/usr/local/etc/prosody/certs
|
|
Volume=%h/podman/prosody-pro/data:/usr/local/var/lib/prosody
|
|
Volume=%h/podman/prosody-pro/extras/firewall:/usr/local/etc/prosody/firewall
|
|
|
|
#add ldap server host if needed
|
|
AddHost=ldap.example.com:x.x.x.x
|
|
|
|
Environment=DOMAIN=example.com
|
|
Environment=DOMAIN_PROXY=proxy65.example.com
|
|
Environment=E2E_POLICY_MUC=optional
|
|
Environment=E2E_POLICY_WHITELIST=admin@example.com,whitlisted_group@conference.example.com
|
|
Environment=SPAM_BLOCKLIST=custom-blocklist.pfw
|
|
Environment=LOG_LEVEL=debug
|
|
Environment=PROSODY_ADMINS=admin@example.com
|
|
#LDAP setup
|
|
Environment=AUTHENTICATION=ldap
|
|
Environment=LDAP_BASE=ou=groups,dc=ldap,dc=example,dc=com
|
|
Environment=LDAP_SERVER=ldap.example.com:389
|
|
Environment=LDAP_ROOTDN=cn=readonly,dc=ldap,dc=example,dc=com
|
|
Environment=LDAP_PASSWORD=passw0rd
|
|
Environment=LDAP_MODE=bind
|
|
Environment=LDAP_SCOPE=subtree
|
|
Environment=LDAP_FILTER=(uid=$user)
|
|
Environment=LDAP_TLS=true
|
|
Environment=ALLOW_REGISTRATION=false
|
|
|
|
[Service]
|
|
Restart=always
|
|
|
|
[Install]
|
|
WantedBy=default.target
|