-- Example: admins = { "user1@example.com", "user2@example.net" }
admins = { }

-- Enable use of libevent for better performance under high load
--use_libevent = true;

modules_enabled = { "roster"; "saslauth"; "tls"; "dialback"; "disco"; "posix"; "private"; "vcard"; "version"; "uptime"; "time"; "ping"; "pep"; "register"; "admin_adhoc"; };

-- modules_disabled = { "offline"; "c2s"; "s2s"; };

allow_registration = false;

ssl = { key = "/etc/ssl/private/example.com.key"; certificate = "/etc/ssl/certs/example.com.crt"; }

c2s_require_encryption = true
s2s_secure_auth = true
--s2s_insecure_domains = { "gmail.com" }
--s2s_secure_domains = { "jabber.org" }

-- Required for init scripts and prosodyctl
pidfile = "/var/run/prosody/prosody.pid"

-- Logging configuration
log = { info = "/var/log/prosody/prosody.log"; error = "/var/log/prosody/prosody.err"; "*syslog"; }

----------- Virtual hosts -----------

VirtualHost "example.com"
enabled = true
debug = true
allow_unencrypted_plain_auth = true
anonymous_login = false
authentication = "ldap2"
-- storage = "ldap" (temporarily commented to figure out tls connection issue)

ldap = {

    hostname      = 'auth.example.com:636',
    use_tls       = true,
    bind_dn       = 'cn=admin,dc=example,dc=com',
    bind_password = 'password',

    user = {
      basedn        = 'ou=people,dc=example,dc=com',
      filter        = '(!(uid=seven))',
      usernamefield = 'uid',
      namefield     = 'cn',
    },

    groups = {
      basedn      = 'ou=groups,dc=example,dc=com',
      memberfield = 'memberUid',
      namefield   = 'cn',
      { name  = 'Support', cn = 'support', admin = false, },
    },

    vcard_format = {
      displayname = 'displayName', -- Consult the vCard configuration section in the README
      nickname    = 'givenName',
      photo       = { type   = 'image/jpeg', binval = 'jpegPhoto', },
    },

}

ssl = { key = "/etc/ssl/private/example.com.key"; certificate = "/etc/ssl/certs/example.com.crt"; cafile = "/etc/ssl/certs/example_ca.crt"; }

------ Components ------

---Set up a MUC (multi-user chat) room server on conference.example.com:
--Component "conference.example.com" "muc"

-- Set up a SOCKS5 bytestream proxy for server-proxied file transfers:
--Component "proxy.example.com" "proxy65"

---Set up an external component (default component port is 5347)
--
-- External components allow adding various services, such as gateways/
-- transports to other networks like ICQ, MSN and Yahoo. For more info
-- see: http://prosody.im/doc/components#adding_an_external_component
--
--Component "gateway.example.com"
--      component_secret = "password"