Files @ 2e1ff733350e
Branch filter:

Location: majic-ansible-roles/roles/prosody/templates/prosody.cfg.lua.j2

branko
MAR-3: Adding Prosody repository apt key. Adding initial implementation of Prosody role, with support for LDAP.
-- Additional paths to search for modules.
plugin_paths = { "/usr/local/lib/prosody/modules/" }

-- List of server administrators.
admins = { {% for admin in prosody_administrators %}"{{ admin }}", {% endfor %} }

-- List of modules to load on startup.
modules_enabled = {

	-- Generally required
		"roster"; -- Allow users to have a roster. Recommended ;)
		"saslauth"; -- Authentication for clients and servers. Recommended if you want to log in.
		"tls"; -- Add support for secure TLS on c2s/s2s connections
		"dialback"; -- s2s dialback support
		"disco"; -- Service discovery
		"posix"; -- POSIX functionality, sends server to background, enables syslog, etc.

	-- Not essential, but recommended
		"private"; -- Private XML storage (for room bookmarks, etc.)
		"vcard"; -- Allow users to set vCards

	-- Nice to have
		"version"; -- Replies to server version requests
		"uptime"; -- Report how long server has been running
		"time"; -- Let others know the time here on this server
		"ping"; -- Replies to XMPP pings with pongs
		"pep"; -- Enables users to publish their mood, activity, playing music and more
		"register"; -- Allow users to register on this server using a client and change passwords

	-- Admin interfaces
		"admin_adhoc"; -- Allows administration via an XMPP client that supports ad-hoc commands

	-- Other specific functionality
		"announce"; -- Send announcement to all online users
};

-- Disable account creation by default, for security
-- For more information see http://prosody.im/doc/creating_accounts
allow_registration = false;

-- These are the SSL/TLS-related settings. If you don't want
-- to use SSL/TLS, you may comment or remove this
ssl = {
	key = "{{ prosody_tls_key }}";
	certificate = "{{ prosody_tls_certificate }}";
}

-- Force clients to use encrypted connection.
c2s_require_encryption = true

-- Disable certificate validation for server-to-server connections.
s2s_secure_auth = false

-- Path to Prosody's PID file.
pidfile = "/var/run/prosody/prosody.pid"

-- Authentication backend.
authentication = "ldap"
ldap_server = "{{ prosody_ldap_server }}"
ldap_rootdn = "{{ prosody_ldap_bind_dn }}"
ldap_password = "{{ prosody_ldap_password }}"
ldap_filter = "{{ prosody_ldap_filter }}"
ldap_scope = "{{ prosody_ldap_scope }}"
ldap_tls = {{ prosody_ldap_tls }}
ldap_base = "{{ prosody_ldap_base }}"

-- Storage backend.
storage = "internal"

-- Logging configuration.
log = {
	debug = "/var/log/prosody/prosody.log"; -- Change 'info' to 'debug' for verbose logging
	error = "/var/log/prosody/prosody.err";
	"*syslog";
}

-- Domains which should be handled by Prosody.
{% for domain in prosody_domains -%}
VirtualHost "{{ domain }}"
{% endfor -%}

-- Support for multi-user chats.
Component "{{ prosody_conference_fqdn }}" "muc"

-- Support for server-proxied file transfers.
Component "{{ prosody_proxy_fqdn }}" "proxy65"