summaryrefslogtreecommitdiff
path: root/files/prosody.cfg.lua.j2
diff options
context:
space:
mode:
authorMatthew Fennell <matthew@fennell.dev>2026-11-12 19:24:34 +0000
committerMatthew Fennell <matthew@fennell.dev>2026-11-12 19:24:34 +0000
commitfb49c9e2bc80598a8e53b8d477c795a396fadb79 (patch)
tree29dd9f2cad5379ef19489ed89c3189bcd43d4bec /files/prosody.cfg.lua.j2
parent456fbc037b0ba473e20a8ca2e3223405d4e8cb11 (diff)
Use xmpp-server role from ansible-roles repoHEADmaster
Now that the role has been migrated, we can remove the manual steps and just use it here.
Diffstat (limited to 'files/prosody.cfg.lua.j2')
-rw-r--r--files/prosody.cfg.lua.j2165
1 files changed, 0 insertions, 165 deletions
diff --git a/files/prosody.cfg.lua.j2 b/files/prosody.cfg.lua.j2
deleted file mode 100644
index 4b79a82..0000000
--- a/files/prosody.cfg.lua.j2
+++ /dev/null
@@ -1,165 +0,0 @@
--- SPDX-FileCopyrightText: 2024 Matthew Fennell <matthew@fennell.dev>
---
--- SPDX-License-Identifier: AGPL-3.0-or-later
-
-plugin_paths = {
- "/usr/local/lib/prosody/modules"
-}
-
-modules_enabled = {
-
- -- Core
- "account_activity";
- "admin_adhoc";
- "admin_shell";
- "blocklist";
- "bookmarks";
- "bosh";
- "carbons";
- "cloud_notify";
- "csi_battery_saver";
- "disco";
- "external_services";
- "lastactivity";
- "lastlog2";
- "limits";
- "mam";
- "measure_active_users";
- "mimicking";
- "pep";
- "ping";
- "private";
- "roster";
- "sasl2";
- "sasl2_bind2";
- "sasl2_fast";
- "sasl2_sm";
- "sasl_ssdp";
- "saslauth";
- "server_contact_info";
- "server_info";
- "smacks";
- "stanza_debug";
- "time";
- "tls";
- "uptime";
- "vcard4";
- "vcard_legacy";
- "version";
- "websocket";
-
-{% if not is_transport_server %}
- -- Invites
- "http";
- "http_libjs";
-{% endif %}
-
-{% if not is_transport_server %}
- -- Turn
- "turn_external";
-{% endif %}
-
-{% if not is_transport_server %}
- -- Spam
- "anti_spam";
- "report_forward";
- "spam_reporting";
- "watch_spam_reports";
-{% endif %}
-
-{% if not is_transport_server %}
- -- S2S
- "s2s_auth_dane_in";
- "s2s_bidi";
-{% endif %}
-
-{% if is_transport_server %}
- -- Privileged components
- "privilege";
-{% endif %}
-
-}
-
-modules_disabled = {
-
-{% if is_transport_server %}
- "s2s";
-{% endif %}
-
-}
-
-pidfile = "/run/prosody/prosody.pid";
-
-log = {
- info = "/var/log/prosody/prosody.log";
- error = "/var/log/prosody/prosody.err";
- {
- levels = {
- "error"
- };
- to = "syslog";
- };
-}
-
-{% if not is_transport_server %}
-s2s_secure_auth = true
-{% endif %}
-
-c2s_direct_tls_ports = {
- 5223
-}
-
-{% if not is_transport_server %}
-s2s_direct_tls_ports = {
- 5270
-}
-use_dane = true
-{% endif %}
-
-{% if not is_transport_server %}
-anti_spam_services = {
- "xmppbl.org"
-}
-report_forward_to = {
- "submit@reports.xmppbl.org";
-}
-{% endif %}
-
-{% if not is_transport_server %}
-turn_external_host = "{{ turn_server }}"
-turn_external_secret = "{{ turn_secret }}"
-{% endif %}
-
--- From Monal considerations for XMPP server admins
-smacks_hibernation_time = 86400
-
-{% if not is_transport_server %}
-allow_registration = true
-registration_invite_only = true
-{% endif %}
-
-{% if not is_transport_server %}
-firewall_scripts = {
- "module:scripts/spam-blocking.pfw";
- "module:script/spam-blocklists.pfw";
-}
-{% endif %}
-
-limits = {
- c2s = {
- rate = "10kb/s";
- };
- s2sin = {
- rate = "30kb/s";
- };
-}
-
-storage = "sql"
-sql = {
- driver = "PostgreSQL";
- database = "prosody";
- username = "prosody";
- password = "{{ postgres_password }}";
-}
-
-Include "conf.d/*.cfg.lua"