prosody

c2s_ports = { 5222, 80 }
interfaces = { "ip4.ip4.ip4.ip4" }
https_ports = { 443 }
admins = { "[email protected]" }
plugin_paths = { "/etc/prosody/prosody-modules-enabled/" }
modules_enabled = {
    -- Generally required
        "roster"; -- Allow users to have a roster. Recommended ;)
        "saslauth"; -- Authentication for clients and servers. Recommended if you want to log in.
        "tls"; -- Add support for secure TLS on c2s/s2s connections
        "dialback"; -- s2s dialback support
        "disco"; -- Service discovery

    -- Not essential, but recommended
        "carbons"; -- Keep multiple clients in sync
        "pep"; -- Enables users to publish their avatar, mood, activity, playing music and more
        "private"; -- Private XML storage (for room bookmarks, etc.)
        "blocklist"; -- Allow users to block communications with other users
        "vcard4"; -- User profiles (stored in PEP)
        "vcard_legacy"; -- Conversion between legacy vCard and PEP Avatar, vcard
            "turncredentials"; -- coturn support
    -- Nice to have
        "version"; -- Replies to server version requests
        "uptime"; -- Report how long server has been running
        "time"; -- Let others know the time here on this server
        "ping"; -- Replies to XMPP pings with pongs
        -- "register"; -- Allow users to register on this server using a client and change passwords
        "mam"; -- Store messages in an archive and allow users to access it
        --"csi_simple"; -- Simple Mobile optimizations
        "csi"; -- XEP-0352: Client State Indication, mod_csi
        "bookmarks"; -- XEP-0411: Bookmarks Conversion
        "cloud_notify"; -- XEP-0357: Push Notifications
        "smacks"; -- XEP-0198: Stream Management
        "disco"; -- Enable mod_disco
        "server_contact_info"; --  XEP-0157: Contact Addresses for XMPP Services (Abuse)
        -- "auth_external"; --jsxc
        "http_altconnect"; --XEP-0156: Discovering Alternative XMPP Connection Methods (HTTP)
        -- "vcard_muc"; -- XEP-0153: vCard-Based Avatar (MUC)
        ---"mam_muc";   -- XEP-0313: Message Archive Management (Multi-User Chat)
        "log_auth"; -- log IP for fail2ban
    -- Admin interfaces
        "admin_adhoc"; -- Allows administration via an XMPP client that supports ad-hoc commands
        --"admin_telnet"; -- Opens telnet console interface on localhost port 5582

    -- HTTP modules
        "bosh"; -- Enable BOSH clients
        "websocket"; -- XMPP over WebSockets
        "http_files"; -- Serve static files from a directory over HTTP

    -- Other specific functionality
        --"limits"; -- Enable bandwidth limiting for XMPP connections
        "groups"; -- Shared roster support
        "server_contact_info"; -- Publish contact information for this service
        "announce"; -- Send announcement to all online users
        "welcome"; -- Welcome users who register accounts
        "watchregistrations"; -- Alert admins of registrations
        "motd"; -- Send a message to users when they log in
        --"legacyauth"; -- Legacy authentication. Only used by some old clients and bots.
        "proxy65"; -- Enables a file transfer proxy service which clients behind NAT can use
}

turncredentials_host = "turn.server.org"
turncredentials_secret = "sharedpasswd"
turncredentials_port = 80
turncredentials_ttl = 86400

contact_info = {
      admin = { "mailto:[email protected]", "xmpp:[email protected]" };
};
modules_disabled = {

}
allow_registration = false
c2s_require_encryption = true
s2s_require_encryption = true
s2s_secure_auth = true

pidfile = "/var/run/prosody/prosody.pid"

authentication = "internal_hashed"

archive_expires_after = "140w"
log = {
    info = "/var/log/prosody/prosody.log";
    error = "/var/log/prosody/prosody.err";
}

http_upload_file_size_limit = 90485760
http_upload_external_file_size_limit = 934003200
   statistics = "internal"
certificates = "certs"

https_certificate = "/etc/prosody/certs/server.org.crt"

legacy_ssl_ports = { 5223 }
ssl = {
                key = "/etc/prosody/certs/privkey.pem";
                certificate = "/etc/prosody/certs/fullchain.pem";
        }

VirtualHost "server.org"

        certificate = "/etc/prosody/certs/server.org.crt"

Component "conference.server.org" "muc"
        certificate = "/etc/prosody/certs/conference.server.org.crt"
        modules_enabled = {
                          "vcard_muc";
                          "muc_mam";
}

Component "upload.server.org" "http_upload"
        certificate = "/etc/prosody/certs/upload.server.org.crt"
Component "rooms.server.org" "muc"
        certificate = "/etc/prosody/certs/rooms.server.org.crt"
modules_enabled = { "muc_mam" }