initial commit

conf.d/01-modules.cfg.lua

@@ -0,0 +1,51 @@
+plugin_paths = { "/usr/local/lib/prosody/custom-modules/" };
+
+modules_enabled = {
+    -- Generally required
+    "roster"; -- Allow users to have a roster. Recommended ;)
+    "saslauth"; -- Authentication for clients and servers. Recommended if you want to log in.
+    "tls"; -- Add support for secure TLS on c2s/s2s connections
+    "dialback"; -- s2s dialback support
+    "disco"; -- Service discovery
+
+    -- Not essential, but recommended
+    "private"; -- Private XML storage (for room bookmarks, etc.)
+    "vcard"; -- Allow users to set vCards
+
+    -- These are commented by default as they have a performance impact
+    "privacy"; -- Support privacy lists
+    --"compression"; -- Stream compression (Debian: requires lua-zlib module to work)
+
+    -- Nice to have
+    "version"; -- Replies to server version requests
+    "uptime"; -- Report how long server has been running
+    "time"; -- Let others know the time here on this server
+    "ping"; -- Replies to XMPP pings with pongs
+    "pep"; -- Enables users to publish their mood, activity, playing music and more
+    "register"; -- Allow users to register on this server using a client and change passwords
+
+    -- Admin interfaces
+    "admin_adhoc"; -- Allows administration via an XMPP client that supports ad-hoc commands
+    --"admin_telnet"; -- Opens telnet console interface on localhost port 5582
+
+    -- HTTP modules
+    --"bosh"; -- Enable BOSH clients, aka "Jabber over HTTP"
+    --"http_files"; -- Serve static files from a directory over HTTP
+
+    -- Other specific functionality
+    "posix"; -- POSIX functionality, sends server to background, enables syslog, etc.
+    --"groups"; -- Shared roster support
+    --"announce"; -- Send announcement to all online users
+    --"welcome"; -- Welcome users who register accounts
+    --"watchregistrations"; -- Alert admins of registrations
+    --"motd"; -- Send a message to users when they log in
+    --"legacyauth"; -- Legacy authentication. Only used by some old clients and bots.
+};
+
+-- These modules are auto-loaded, but should you want
+-- to disable them then uncomment them here:
+modules_disabled = {
+    -- "offline"; -- Store offline messages
+    -- "c2s"; -- Handle client connections
+    -- "s2s"; -- Handle server-to-server connections
+};

conf.d/02-storage.cfg.lua

@@ -0,0 +1,13 @@
+default_storage = "sql"
+sql = {
+  driver = "SQLite3";
+  database = "prosody.sqlite";
+}
+
+storage = {
+  -- this makes mod_mam use the sql storage backend
+  archive2 = "sql";
+}
+
+-- https://modules.prosody.im/mod_mam.html
+archive_expires_after = "1y"

conf.d/03-e2e-policy.cfg.lua

@@ -0,0 +1,7 @@
+e2e_policy_chat = "required"
+e2e_policy_muc = "required"
+e2e_policy_whitelist = {}
+e2e_policy_message_optional_chat = "For security reasons, OMEMO, OTR or PGP encryption is STRONGLY recommended for conversations on this server."
+e2e_policy_message_required_chat = "For security reasons, OMEMO, OTR or PGP encryption is required for conversations on this server."
+e2e_policy_message_optional_muc = "For security reasons, OMEMO, OTR or PGP encryption is STRONGLY recommended for MUC on this server."
+e2e_policy_message_required_muc = "For security reasons, OMEMO, OTR or PGP encryption is required for MUC on this server."

conf.d/04-vhost.cfg.lua

@@ -0,0 +1,18 @@
+local domain = os.getenv("DOMAIN")
+
+ssl = {
+	key = "/usr/local/etc/prosody/certs/prosody.key";
+	certificate = "/usr/local/etc/prosody/certs/prosody.crt";
+}
+
+VirtualHost (domain)
+
+-- Set up a SOCKS5 bytestream proxy for server-proxied file transfers
+Component ("proxy." .. domain) "proxy65"
+	proxy65_address = domain
+	proxy65_acl = { domain }
+
+
+-- Set up a http file upload because proxy65 is not working in muc
+-- Component (domain) "http_upload"
+-- is set-up via modules_enabled