fd4844a012
Fix ejabberd API permission for akkounts VMs
...
It should have been using a /32, not a /8 subnet, in order to only allow
the akkounts VM(s) to use the API endpoints without further
authorization.
2021-01-22 18:41:45 +01:00
239b6aed51
Add API permissions for akkounts VMs
...
Using the zerotier IP, which is the same as the knife-zero host.
2020-12-08 20:00:31 +01:00
56d9144ad6
Disable ACME
...
Throws a warning when reloading the config, because it is enabled by
default, but not configured entirely. Disabling it explicitly removes
the warning.
2020-12-08 14:30:29 +01:00
Greg Karékinian
085bd8abd5
Move TURN port to a different range
...
It landed on a port used by PostgreSQL. Also switch STUN/TURN to TCP
because HAProxy does not support UDP.
Closes #240
2020-11-25 16:36:07 +01:00
f39f953b8a
Configure ejabberd nodes for HTTP upload service
2020-11-24 15:44:59 +01:00
4448ec2173
Configure TURN properly
...
Was missing a couple of necessary properties, and is now using an
explicit port range for TURN, and opening those ports in UFW.
2020-05-02 14:07:14 +02:00
ef2fa2da72
Configure STUN/TURN
...
Configures built-in STUN/TURN support, and adds the new service discovery
module for it.
2020-05-01 16:25:38 +02:00
Greg Karékinian
56adfa37fb
Fix a warning in the config
...
Migrate the web admin to a request handler
2020-02-17 17:26:55 +01:00
Greg Karékinian
c2b2b6f08b
Fix the vhost template
...
hosts must be defined in the main config file
2020-02-17 15:04:08 +01:00
Greg Karékinian
38f39af2a4
Move each vhost to its own config file
2020-02-17 13:20:54 +01:00
Greg Karékinian
55eb95ae73
Verify the TLS server's certificate
...
Do not proceed if a certificate is invalid
2020-02-14 13:56:52 +01:00
Greg Karékinian
49d01991fd
Enable LDAP on the XMPP 5apps.com vhost
...
Refactor the ejabberd config file to remove hardcoded values about the
vhosts
Refs #123
2020-02-12 17:40:38 +01:00
Greg Karékinian
544f4b78f4
Change the MUC domain for the kosmos.org XMPP server to kosmos.chat
2019-09-19 15:57:54 +02:00
Greg Karékinian
0fa9e6cbb7
Set the uploads dir inside of /opt/ejabberd instead of /var/www
...
/var/www is intended for nginx/apache
I have copied over the old directories manually on Andromeda before
running this code
Fixes #80
2019-07-19 12:47:42 +02:00
Greg Karékinian
0be63e5935
Fix the config file when no TLS certs exist
2019-05-14 11:31:42 +02:00
Greg Karékinian
d9390a4b92
Don't use a concatenated cert for kosmos.org anymore
2019-05-13 18:53:45 +02:00
Greg Karékinian
88204ea91b
Update the config to the current one running on andromeda
2019-05-13 17:59:04 +02:00
Greg Karékinian
9346188ca7
Initial kosmos-ejabberd cookbook
2019-04-17 10:11:52 +02:00
