feat: first commit

2026-10-11 00:13:32 +03:00
commit 5fdf790556
@@ -0,0 +1,200 @@
+hosts:
+  - ra-tech.dev
+  - xmpp.ra-itech.ru
+
+hosts_alias:
+  "64.188.58.223": "ra-tech.dev"
+
+language: ru
+
+loglevel: info
+
+certfiles:
+  - /etc/ejabberd/server.pem
+  - /etc/ejabberd/server-key.pem
+  - /etc/ejabberd/certs/fullchain.pem
+  - /etc/ejabberd/certs/privkey.pem
+
+auth_method: internal
+auth_password_format: scram
+auth_scram_hash: sha512
+
+sql_database: /opt/ejabberd/sqlite/db.sqlite
+sql_type: sqlite
+sql_pool_size: 1
+
+s2s_access:
+  deny: all
+
+acl:
+  admin:
+    user:
+      - kodacci@ra-tech.dev
+      - kodacci@xmpp.ra-itech.ru
+  disabled_servers:
+    server:
+      - "p2.siacs.eu"
+
+access_rules:
+  configure:
+    allow: admin
+  announce:
+    allow: admin
+  c2s:
+    deny: blocked
+    allow: all
+  pubsub_createnode:
+    allow: admin
+  s2s:
+    deny: disabled_servers
+
+shaper:
+  fast: 3000000
+
+shaper_rules:
+  max_user_sessions: 50
+  max_user_offline_messages: 5000
+  c2s_shaper: fast
+
+modules:
+  mod_adhoc: {}
+  mod_adhoc_api: {}
+  mod_admin_extra: {}
+  mod_announce:
+    access: announce
+  mod_avatar: {}
+  mod_blocking: {}
+  mod_bosh: {}
+  mod_caps: {}
+  mod_carboncopy: {}
+  mod_client_state: {}
+  mod_configure: {}
+  mod_disco: {}
+  mod_fail2ban: {}
+  mod_http_api: {}
+  mod_last: {}
+  mod_muc:
+    access_admin:
+      - allow: admin
+  mod_muc_admin: {}
+  mod_offline:
+    access_max_user_messages: max_user_offline_messages
+  mod_ping:
+    send_pings: true
+    ping_interval: 1 min
+  mod_privacy: {}
+  mod_private: {}
+  mod_push: {}
+  mod_push_keepalive: {}
+  mod_roster:
+    versioning: true
+  mod_s2s_bidi: {}
+  mod_s2s_dialback: {}
+  mod_shared_roster: {}
+  mod_stream_mgmt:
+    resend_on_timeout: if_offline
+  mod_stun_disco:
+    access: c2s
+    credentials_lifetime: 12h
+    services:
+      - host: xmpp.ra-itech.ru
+        port: 3478
+        type: stun
+        transport: udp
+        restricted: false
+      - host: xmpp.ra-itech.ru
+        port: 3478
+        type: turn
+        transport: udp
+        restricted: true
+      - host: xmpp.ra-itech.ru
+        port: 5349
+        type: stuns
+        transport: tcp
+        restricted: false
+      - host: xmpp.ra-itech.ru
+        port: 5349
+        type: turns
+        transport: tcp
+        restricted: true
+  mod_vcard: {}
+  mod_vcard_xupdate: {}
+  mod_version:
+    show_os: false
+  mod_pubsub:
+    access_createnode: pubsub_createnode
+    plugins:
+      - flat
+      - pep
+    force_node_config:
+      ## Avoid buggy clients to make their bookmarks public
+      storage:bookmarks:
+        access_model: whitelist
+  mod_proxy65:
+    access: c2s
+    max_connections: 50
+    port: 7788
+    shaper: fast
+  mod_http_fileserver:
+    accesslog: /opt/ejabberd/logs/access.log
+    docroot:
+      /files: /opt/fileserver
+  mod_http_upload:
+    access: c2s
+    docroot: /opt/fileserver
+    put_url: "https://@HOST@:5443/upload"
+    get_url: "https://@HOST@:5443/files"
+  mod_mam:
+    access_preferences: c2s
+    db_type: sql
+
+listen:
+  - port: 5222
+    ip: "::"
+    module: ejabberd_c2s
+    shaper: c2s_shaper
+    access: c2s
+    max_stanza_size: 262144
+    starttls: true
+    allow_unencrypted_sasl2: false
+    cafile: /etc/ejabberd/ca.pem
+    starttls_required: true
+    tls_verify: true
+
+  - port: 5223
+    ip: "::"
+    module: ejabberd_c2s
+    shaper: c2s_shaper
+    access: c2s
+    max_stanza_size: 262144
+    starttls: true
+    starttls_required: true
+    tls_verify: false
+
+  - port: 3478
+    transport: udp
+    module: ejabberd_stun
+    use_turn: true
+    turn_min_port: 49152
+    turn_max_port: 65535
+    turn_ip: 64.188.58.223
+
+  - port: 5349
+    transport: tcp
+    module: ejabberd_stun
+    use_turn: true
+    tls: true
+    turn_min_port: 49152
+    turn_max_port: 65535
+    ip: 64.188.58.223
+    turn_ip: 64.188.58.223
+
+  - port: 5443
+    ip: "::"
+    transport: tcp
+    module: ejabberd_http
+    tls: true
+    request_handlers:
+      /files: mod_http_fileserver
+      /upload: mod_http_upload
+      /bosh: mod_bosh