· 10 years ago · Nov 30, 2015, 04:33 PM
1c2s_ports = { 5222, 5322 } -- Listen on 5322 as well as 5222
2pidfile = "prosody.pid"
3
4admins = { "admin@souliane.org", "goffi@tazar.int", "elisee@tazar.int", "anna@diekulturvermittlung.at" }
5
6modules_enabled = {
7
8 -- Generally required
9 "roster"; -- Allow users to have a roster. Recommended ;)
10 "saslauth"; -- Authentication for clients and servers. Recommended if you want to log in.
11 "tls"; -- Add support for secure TLS on c2s/s2s connections
12 "dialback"; -- s2s dialback support
13 "disco"; -- Service discovery
14
15 -- Not essential, but recommended
16 "private"; -- Private XML storage (for room bookmarks, etc.)
17 "vcard"; -- Allow users to set vCards
18
19 -- These are commented by default as they have a performance impact
20 --"blocklist"; -- Allow users to block communications with other users
21 "compression"; -- Stream compression
22
23 -- Nice to have
24 "version"; -- Replies to server version requests
25 "uptime"; -- Report how long server has been running
26 "time"; -- Let others know the time here on this server
27 "ping"; -- Replies to XMPP pings with pongs
28 "pep"; -- Enables users to publish their mood, activity, playing music and more
29 "register"; -- Allow users to register on this server using a client and change passwords
30 "adhoc"; -- Support for "ad-hoc commands" that can be executed with an XMPP client
31
32-- Admin interfaces
33 "admin_adhoc"; -- Allows administration via an XMPP client that supports ad-hoc commands
34 --"admin_telnet"; -- Opens telnet console interface on localhost port 5582
35
36 -- HTTP modules
37 --"bosh"; -- Enable BOSH clients, aka "Jabber over HTTP"
38 --"http_files"; -- Serve static files from a directory over HTTP
39
40 -- Other specific functionality
41 "posix";
42 "groups"; -- Shared roster support
43 "announce"; -- Send announcement to all online users
44 "welcome"; -- Welcome users who register accounts
45 --"watchregistrations"; -- Alert admins of registrations
46 --"motd"; -- Send a message to users when they log in
47 --"legacyauth"; -- Legacy authentication. Only used by some old clients and bots.
48
49 -- Addressing
50 "addressing";
51 "mam";
52 "privilege";
53 "delegation";
54 "ipcheck";
55}
56
57-- Disable account creation by default, for security
58-- For more information see http://prosody.im/doc/creating_accounts
59allow_registration = true
60
61-- These are the SSL/TLS-related settings. If you don't want
62-- to use SSL/TLS, you may comment or remove this
63ssl = {
64 key = "certs/localhost.key";
65 certificate = "certs/localhost.crt";
66}
67
68-- Force clients to use encrypted connections? This option will
69-- prevent clients from authenticating unless they are using encryption.
70
71c2s_require_encryption = true
72
73-- Force certificate authentication for server-to-server connections?
74-- This provides ideal security, but requires servers you communicate
75-- with to support encryption AND present valid, trusted certificates.
76-- NOTE: Your version of LuaSec must support certificate verification!
77-- For more information see http://prosody.im/doc/s2s#security
78
79s2s_secure_auth = false
80
81-- Many servers don't support encryption or have invalid or self-signed
82-- certificates. You can list domains here that will not be required to
83-- authenticate using certificates. They will be authenticated using DNS.
84
85s2s_insecure_domains = { "gmail.com", "tazar.int", "souliane.org", "diekulturvermittlung.at" }
86
87-- Even if you leave s2s_secure_auth disabled, you can still require valid
88-- certificates for some domains by specifying a list here.
89
90s2s_secure_domains = { "jabberfr.org" }
91
92-- Select the authentication backend to use. The 'internal' providers
93-- use Prosody's configured data storage to store the authentication data.
94-- To allow Prosody to offer secure authentication mechanisms to clients, the
95-- default provider stores passwords in plaintext. If you do not trust your
96-- server please see http://prosody.im/doc/modules/mod_auth_internal_hashed
97-- for information about using the hashed backend.
98
99authentication = "internal_plain"
100
101-- Select the storage backend to use. By default Prosody uses flat files
102-- in its configured data directory, but it also supports more backends
103-- through modules. An "sql" backend is included by default, but requires
104-- additional dependencies. See http://prosody.im/doc/storage for more info.
105
106--storage = "sql" -- Default is "internal"
107
108-- for mam
109storage = {
110 -- This makes mod_mam use the sql2 storage backend (others will use internal)
111 archive2 = "sql2";
112}
113default_archive_policy = true; -- other options are true or "roster";
114max_archive_query_results = 20;
115
116-- For the "sql" backend, you can uncomment *one* of the below to configure:
117sql2 = { driver = "SQLite3", database = "prosody.sqlite" } -- Default. 'database' is the filename.
118--sql = { driver = "MySQL", database = "prosody", username = "prosody", password = "secret", host = "localhost" }
119--sql = { driver = "PostgreSQL", database = "prosody", username = "prosody", password = "secret", host = "localhost" }
120
121-- Logging configuration
122-- For advanced logging see http://prosody.im/doc/logging
123log = {
124 debug = "prosody.log"; -- Change 'info' to 'debug' for verbose logging
125 error = "prosody.err";
126 -- "*syslog"; -- Uncomment this for logging to syslog
127 -- "*console"; -- Log to the console, useful for debugging with daemonize=false
128}
129
130----------- Virtual hosts -----------
131-- You need to add a VirtualHost entry for each domain you wish Prosody to serve.
132-- Settings under each VirtualHost entry apply *only* to that host.
133
134--VirtualHost "localhost"
135
136VirtualHost "diekulturvermittlung.at"
137 privileged_entities = {
138 ["sat-pubsub.diekulturvermittlung.at"] = {
139 roster = "both";
140 message = "outgoing";
141 presence = "roster";
142 },
143 }
144 delegations = {
145 ["urn:xmpp:mam:0"] = {
146 filtering = {"node"};
147 jid = "sat-pubsub.diekulturvermittlung.at";
148 },
149 ["http://jabber.org/protocol/pubsub"] = {
150 jid = "sat-pubsub.diekulturvermittlung.at";
151 },
152 }
153 ssl = {
154 key = "certs/diekulturvermittlung.at.key";
155 certificate = "certs/diekulturvermittlung.at.crt";
156 }
157--VirtualHost "tazar.int"
158-- ssl = {
159-- key = "certs/tazar.int.key";
160-- certificate = "certs/tazar.int.crt";
161-- }
162--VirtualHost "souliane.org"
163-- ssl = {
164-- key = "certs/souliane.org.key";
165-- certificate = "certs/souliane.org.crt";
166-- }
167
168------ Components ------
169-- You can specify components to add hosts that provide special services,
170-- like multi-user conferences, and transports.
171-- For more information on components, see http://prosody.im/doc/components
172
173---Set up a MUC (multi-user chat) room server on conference.example.com:
174
175--Component "chat.tazar.int" "muc"
176--Component "chat.souliane.org" "muc"
177Component "chat.diekulturvermittlung.at" "muc"
178--Component "chat.localhost" "muc"
179
180-- Set up a SOCKS5 bytestream proxy for server-proxied file transfers:
181--Component "proxy.example.com" "proxy65"
182
183---Set up an external component (default component port is 5347)
184--
185-- External components allow adding various services, such as gateways/
186-- transports to other networks like ICQ, MSN and Yahoo. For more info
187-- see: http://prosody.im/doc/components#adding_an_external_component
188--
189--Component "gateway.example.com"
190-- component_secret = "password"
191
192Component "sat-pubsub.localhost"
193 component_secret = "password"
194 modules_enabled = {"delegation", "privilege"}
195
196Component "salut.localhost"
197 component_secret = "password"