Use automatic location for certificates

README: SSL certificates
Port 5223 for legacy ssl c2s
This commit is contained in:
Sara Aimée Smiseth 2020-06-01 11:10:19 +02:00
parent 4ff329cad2
commit d9aff8aaad
3 changed files with 75 additions and 37 deletions

View file

@ -3,11 +3,17 @@ local domain_http_upload = os.getenv("DOMAIN_HTTP_UPLOAD")
local domain_muc = os.getenv("DOMAIN_MUC")
local domain_proxy = os.getenv("DOMAIN_PROXY")
-- This is a fallback just for http_upload because service certificates are searched differently
-- https://prosody.im/doc/certificates#service_certificates
ssl = {
key = "/usr/local/etc/prosody/certs/prosody.key";
certificate = "/usr/local/etc/prosody/certs/prosody.crt";
certificate = "certs/" .. domain .. "/fullchain.pem";
key = "certs/" .. domain .. "/privkey.pem";
}
-- XEP-0368: SRV records for XMPP over TLS
-- https://compliance.conversations.im/test/xep0368/
legacy_ssl_ports = { 5223 }
VirtualHost (domain)
-- Set up a http file upload because proxy65 is not working in muc