WIP: Set up ejabberd for kosmos.org #9

Closed
greg wants to merge 24 commits from feature/7-ejabberd into master
Owner

TODO:

  • Replace the temporary hardcoded DB password
  • Sync the configuration based on the current one on Andromeda

The config is based off the latest config on the Andromeda server, adapted for multiple vhosts (using a config to set the SQL schema to a version that supports multiple servers using the same DB, changed the mod_http_upload config to use the @HOST@ variable, enable mod_muc separately)

TODO: * [x] Replace the temporary hardcoded DB password * [ ] Sync the configuration based on the current one on Andromeda The config is based off the latest config on the Andromeda server, adapted for multiple vhosts (using a config to set the SQL schema to a version that supports multiple servers using the same DB, changed the mod_http_upload config to use the `@HOST@` variable, enable mod_muc separately)
Owner

In addition to my comments on the unref'd original issue for this, please be aware that the config file on Andromeda is outdated, so all the commented things are 100% not safe to use until validating every single one. I don't know where the config comes from, but it was quite annoying when I tried to uncomment things here and there.

I don't think we should use outdated commented config as a basis for a new cookbook.

In addition to my comments on the unref'd original issue for this, please be aware that the config file on Andromeda is outdated, so all the commented things are 100% not safe to use until validating every single one. I don't know where the config comes from, but it was quite annoying when I tried to uncomment things here and there. I don't think we should use outdated commented config as a basis for a new cookbook.
raucao reviewed 2019-01-12 04:37:38 +00:00
Owner

The version shouldn't be hardcoded in a cookbook. But also, I don't think the entire program should live in a version-number directory.

The version shouldn't be hardcoded in a cookbook. But also, I don't think the entire program should live in a version-number directory.
Owner

This would have been incredibly useful: https://github.com/processone/ejabberd/blob/master/ejabberd.yml.example

I managed to get the server 100% compliant on the Conversations test suite now: https://compliance.conversations.im/server/kosmos.org/

This would have been incredibly useful: https://github.com/processone/ejabberd/blob/master/ejabberd.yml.example I managed to get the server 100% compliant on the Conversations test suite now: https://compliance.conversations.im/server/kosmos.org/
Owner

I hacked up a bad nginx config for delivering https://xmpp.kosmos.org/.well-known/host-meta which should turn the last red result into a green one. It's for announcing the URLs for bosh and websockets.

Edit: Argh, I think that was wrong and it actually has to go on kosmos.org instead.

I hacked up a bad nginx config for delivering https://xmpp.kosmos.org/.well-known/host-meta which should turn the last red result into a green one. It's for announcing the URLs for bosh and websockets. Edit: Argh, I think that was wrong and it actually has to go on `kosmos.org` instead.
Owner

Regarding a couple of things I just saw in the updates:

  • Kosmos domains should use a kosmos.org email address for LE, not a 5apps one
  • Certbot should be installed from the official Ubuntu packages, as recommended by them. Not sure why the switch was reverted, but it's mixed in with other changes.
Regarding a couple of things I just saw in the updates: * Kosmos domains should use a kosmos.org email address for LE, not a 5apps one * Certbot should be installed from the official Ubuntu packages, as recommended by them. Not sure why the switch was reverted, but it's mixed in with other changes.
Owner

Btw, it would be rather useful if the to-do list in the original PR description would be more precise/expressive and granular. I don't really know what "add more config" is about for example.

Btw, it would be rather useful if the to-do list in the original PR description would be more precise/expressive and granular. I don't really know what "add more config" is about for example.
Owner

Also just found #1 which is related to this.

Also just found #1 which is related to this.
Author
Owner

Kosmos domains should use a kosmos.org email address for LE, not a 5apps one

Right, changing that

Certbot should be installed from the official Ubuntu packages, as recommended by them. Not sure why the switch was reverted, but it’s mixed in with other changes.

I pushed that change by accident, I reverted it so I could enable backups on Andromeda without changing the Let's Encrypt setup for now

> Kosmos domains should use a kosmos.org email address for LE, not a 5apps one Right, changing that > Certbot should be installed from the official Ubuntu packages, as recommended by them. Not sure why the switch was reverted, but it’s mixed in with other changes. I pushed that change by accident, I reverted it so I could enable backups on Andromeda without changing the Let's Encrypt setup for now
greg changed title from WIP: Set up ejabberd for a public kosmos.org and a private 5apps.com to WIP: Set up ejabberd for kosmos.org 2019-03-19 15:30:02 +00:00
Author
Owner

Closing in favor of #24

Closing in favor of #24
greg closed this pull request 2019-03-19 15:33:18 +00:00

Pull request closed

Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/chef#9
No description provided.