From fb49c9e2bc80598a8e53b8d477c795a396fadb79 Mon Sep 17 00:00:00 2001 From: Matthew Fennell Date: Thu, 12 Nov 2026 19:24:34 +0000 Subject: Use xmpp-server role from ansible-roles repo Now that the role has been migrated, we can remove the manual steps and just use it here. --- files/prosody.cfg.lua.j2 | 165 ----------------------------------------------- 1 file changed, 165 deletions(-) delete mode 100644 files/prosody.cfg.lua.j2 (limited to 'files/prosody.cfg.lua.j2') diff --git a/files/prosody.cfg.lua.j2 b/files/prosody.cfg.lua.j2 deleted file mode 100644 index 4b79a82..0000000 --- a/files/prosody.cfg.lua.j2 +++ /dev/null @@ -1,165 +0,0 @@ --- SPDX-FileCopyrightText: 2024 Matthew Fennell --- --- SPDX-License-Identifier: AGPL-3.0-or-later - -plugin_paths = { - "/usr/local/lib/prosody/modules" -} - -modules_enabled = { - - -- Core - "account_activity"; - "admin_adhoc"; - "admin_shell"; - "blocklist"; - "bookmarks"; - "bosh"; - "carbons"; - "cloud_notify"; - "csi_battery_saver"; - "disco"; - "external_services"; - "lastactivity"; - "lastlog2"; - "limits"; - "mam"; - "measure_active_users"; - "mimicking"; - "pep"; - "ping"; - "private"; - "roster"; - "sasl2"; - "sasl2_bind2"; - "sasl2_fast"; - "sasl2_sm"; - "sasl_ssdp"; - "saslauth"; - "server_contact_info"; - "server_info"; - "smacks"; - "stanza_debug"; - "time"; - "tls"; - "uptime"; - "vcard4"; - "vcard_legacy"; - "version"; - "websocket"; - -{% if not is_transport_server %} - -- Invites - "http"; - "http_libjs"; -{% endif %} - -{% if not is_transport_server %} - -- Turn - "turn_external"; -{% endif %} - -{% if not is_transport_server %} - -- Spam - "anti_spam"; - "report_forward"; - "spam_reporting"; - "watch_spam_reports"; -{% endif %} - -{% if not is_transport_server %} - -- S2S - "s2s_auth_dane_in"; - "s2s_bidi"; -{% endif %} - -{% if is_transport_server %} - -- Privileged components - "privilege"; -{% endif %} - -} - -modules_disabled = { - -{% if is_transport_server %} - "s2s"; -{% endif %} - -} - -pidfile = "/run/prosody/prosody.pid"; - -log = { - info = "/var/log/prosody/prosody.log"; - error = "/var/log/prosody/prosody.err"; - { - levels = { - "error" - }; - to = "syslog"; - }; -} - -{% if not is_transport_server %} -s2s_secure_auth = true -{% endif %} - -c2s_direct_tls_ports = { - 5223 -} - -{% if not is_transport_server %} -s2s_direct_tls_ports = { - 5270 -} -use_dane = true -{% endif %} - -{% if not is_transport_server %} -anti_spam_services = { - "xmppbl.org" -} -report_forward_to = { - "submit@reports.xmppbl.org"; -} -{% endif %} - -{% if not is_transport_server %} -turn_external_host = "{{ turn_server }}" -turn_external_secret = "{{ turn_secret }}" -{% endif %} - --- From Monal considerations for XMPP server admins -smacks_hibernation_time = 86400 - -{% if not is_transport_server %} -allow_registration = true -registration_invite_only = true -{% endif %} - -{% if not is_transport_server %} -firewall_scripts = { - "module:scripts/spam-blocking.pfw"; - "module:script/spam-blocklists.pfw"; -} -{% endif %} - -limits = { - c2s = { - rate = "10kb/s"; - }; - s2sin = { - rate = "30kb/s"; - }; -} - -storage = "sql" -sql = { - driver = "PostgreSQL"; - database = "prosody"; - username = "prosody"; - password = "{{ postgres_password }}"; -} - -Include "conf.d/*.cfg.lua" -- cgit v1.2.3