Prosody

General check

prosodyctl check

List all user accounts

ls /var/lib/prosody//accounts/

Update certificates (run after every certificate renewal)

prosodyctl --root cert import /etc/letsencrypt/live

Example prosody.cfg.lua for Prosody 0.12+

---------- Server-wide settings ----------
admins = { }
modules_enabled = {
-- Generally required
"roster"; -- Allow users to have a roster. Recommended ;)
"saslauth"; -- Authentication for clients and servers. Recommended if you want to log in.
"tls"; -- Add support for secure TLS on c2s/s2s connections
"dialback"; -- s2s dialback support
"disco"; -- Service discovery
-- Not essential, but recommended
"carbons"; -- Keep multiple clients in sync
"pep"; -- Enables users to publish their avatar, mood, activity, playing music and more
"private"; -- Private XML storage (for room bookmarks, etc.)
"blocklist"; -- Allow users to block communications with other users
"vcard4"; -- User profiles (stored in PEP)
"vcard_legacy"; -- Conversion between legacy vCard and PEP Avatar, vcard
-- Nice to have
"version"; -- Replies to server version requests
"uptime"; -- Report how long server has been running
"time"; -- Let others know the time here on this server
"ping"; -- Replies to XMPP pings with pongs
"register"; -- Allow users to register on this server using a client and change passwords
"mam"; -- Message Archive Management for chats
"csi"; -- Allows clients to report active/inactive state
"csi_simple"; -- Simple mobile optimizations for csi
-- Admin interfaces
"admin_shell"; 
-- HTTP modules
"http"; -- Loaded as needed by other modules
--"bosh"; -- Enable BOSH clients, aka "Jabber over HTTP"
--"websocket"; -- XMPP over WebSockets
--"http_files"; -- Serve static files from a directory over HTTP (not for sharing)
-- Other specific functionality
"posix"; -- POSIX functionality, sends server to background, enables syslog, etc.
--"limits"; -- Enable bandwidth limiting for XMPP connections
--"groups"; -- Shared roster support
--"server_contact_info"; -- Publish contact information for this service
--"announce"; -- Send announcement to all online users
--"welcome"; -- Welcome users who register accounts
--"watchregistrations"; -- Alert admins of registrations
--"motd"; -- Send a message to users when they log in
--"legacyauth"; -- Legacy authentication. Only used by some old clients and bots.
--"proxy65"; -- Enables a file transfer proxy service which clients behind NAT can use
-- Mobile
"smacks"; 
"cloud_notify"; -- Push notifications (needed for iOS)
} 
 
modules_disabled = {
} 
 
-- Disable account creation
allow_registration = false
 
pidfile = "/run/prosody/prosody.pid";
 
c2s_require_encryption = true
s2s_require_encryption = true
s2s_secure_auth = true
 
authentication = "internal_hashed"
 
archive_expires_after = "28d" -- Remove archived messages after 4 weeks (GDPR says hi)
 
-- Replace 'info' with 'debug' for debugging
log = {
info = "/var/log/prosody/prosody.log";
error = "/var/log/prosody/prosody.err";
{ levels = { "error" }; to = "syslog";  };
} 
 
certificates = "certs"
 
-- Prosody 0.12.x and later will automatically find and serve an appropriate
-- certificate for HTTPS, based on the certificates already used for your XMPP
-- services and the hostname requested by the client or web browser.
-- No additional configuration should be necessary for most deployments.
 
----------- Virtual hosts -----------
 
VirtualHost "example.net"
 
------ Components ------
 
-- Group chats
Component "groups.example.net" "muc"
restrict_room_creation="local" 
modules_enabled = {
"muc_mam" -- Message Archive Management for groups
} 
muc_log_expires_after = "28d"
muc_log_cleanup_interval = 12 * 60 * 60
 
-- Share files via HTTP (v0.12+)
Component "share.example.net" "http_file_share"
-- This path is required for clients to work correctly
-- Have no idea why
http_paths = {
file_share = "/upload"
} 
http_file_share_size_limit = 128*1024*1024+16 -- 128 MiB
http_file_share_expire_after = 60*60*24*28 -- 28 days