JensWH/netz39-infra-ansible
1
0
Fork 0
forked from Netz39_Admin/netz39-infra-ansible
Code Pull requests Activity

🔧 prosody: Remove legacy TLS options

Browse source 
Connections to server failed after Let's Encrypt certificate renew.
This commit is contained in:
Alexander Dahl 2022-12-20 10:26:11 +01:00 committed by Alexander Dahl
parent bd8500bf3a
commit 55204a1b21
1 changed files with 14 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

37
files/prosody/jabber.n39.eu.cfg.lua
View file

@ -1,36 +1,27 @@
-- Section for example.com
VirtualHost "jabber.n39.eu"
-- Assign this host a certificate for TLS, otherwise it would use the one
-- set in the global section (if any).
-- Note that old-style SSL on port 5223 only supports one certificate, and will always
-- use the global one.
ssl = {
key = "/etc/prosody/certs/jabber.n39.eu.key";
certificate = "/etc/prosody/certs/jabber.n39.eu.pem";
dhparam = "/etc/prosody/certs/dh-2048.pem";
-- TODO for post 0.10 see http://prosody.im/doc/advanced_ssl_config again
options = { "no_sslv2", "no_sslv3", "no_ticket", "no_compression", "cipher_server_preference", "single_dh_use", "single_ecdh_use" };
}
-- certificate = "/path/to/example.crt"
------ Components ------
-- You can specify components to add hosts that provide special services,
-- like multi-user conferences, and transports.
-- For more information on components, see http://prosody.im/doc/components
-- For more information on components, see https://prosody.im/doc/components
-- Set up a MUC (multi-user chat) room server on conference.example.com:
---Set up a MUC (multi-user chat) room server on conference.example.com:
--Component "conference.example.com" "muc"
--- Store MUC messages in an archive and allow users to access it
--modules_enabled = { "muc_mam" }
Component "conference.jabber.n39.eu" "muc"
-- Set up a SOCKS5 bytestream proxy for server-proxied file transfers:
--Component "proxy.example.com" "proxy65"
---Set up an external component (default component port is 5347)
--Component "gateway.example.com"
-- component_secret = "password"
-- alex: service discovery
disco_items = {
{ "conference.jabber.n39.eu", "The Netz39 Multi-User-Chat" };
}
---Set up an external component (default component port is 5347)
--
-- External components allow adding various services, such as gateways/
-- transports to other networks like ICQ, MSN and Yahoo. For more info
-- see: https://prosody.im/doc/components#adding_an_external_component
--
--Component "gateway.example.com"
-- component_secret = "password"