hosts:
  - ra-tech.dev
  - xmpp.ra-itech.ru

hosts_alias:
  "64.188.58.223": "ra-tech.dev"

language: ru

loglevel: info

certfiles:
  - /etc/ejabberd/server.pem
  - /etc/ejabberd/server-key.pem
  - /etc/ejabberd/certs/fullchain.pem
  - /etc/ejabberd/certs/privkey.pem

auth_method: internal
auth_password_format: scram
auth_scram_hash: sha512

sql_database: /opt/ejabberd/sqlite/db.sqlite
sql_type: sqlite
sql_pool_size: 1

s2s_access:
  deny: all

acl:
  admin:
    user:
      - kodacci@ra-tech.dev
      - kodacci@xmpp.ra-itech.ru
  disabled_servers:
    server:
      - "p2.siacs.eu"

access_rules:
  configure:
    allow: admin
  announce:
    allow: admin
  c2s:
    deny: blocked
    allow: all
  pubsub_createnode:
    allow: admin
  s2s:
    deny: disabled_servers

shaper:
  fast: 3000000

shaper_rules:
  max_user_sessions: 50
  max_user_offline_messages: 5000
  c2s_shaper: fast

modules:
  mod_adhoc: {}
  mod_adhoc_api: {}
  mod_admin_extra: {}
  mod_announce:
    access: announce
  mod_avatar: {}
  mod_blocking: {}
  mod_bosh: {}
  mod_caps: {}
  mod_carboncopy: {}
  mod_client_state: {}
  mod_configure: {}
  mod_disco: {}
  mod_fail2ban: {}
  mod_http_api: {}
  mod_last: {}
  mod_muc:
    access_admin:
      - allow: admin
  mod_muc_admin: {}
  mod_offline:
    access_max_user_messages: max_user_offline_messages
  mod_ping:
    send_pings: true
    ping_interval: 1 min
  mod_privacy: {}
  mod_private: {}
  mod_push: {}
  mod_push_keepalive: {}
  mod_roster:
    versioning: true
  mod_s2s_bidi: {}
  mod_s2s_dialback: {}
  mod_shared_roster: {}
  mod_stream_mgmt:
    resend_on_timeout: if_offline
  mod_stun_disco:
    access: c2s
    credentials_lifetime: 12h
    services:
      - host: xmpp.ra-itech.ru
        port: 3478
        type: stun
        transport: udp
        restricted: false
      - host: xmpp.ra-itech.ru
        port: 3478
        type: turn
        transport: udp
        restricted: true
      - host: xmpp.ra-itech.ru
        port: 5349
        type: stuns
        transport: tcp
        restricted: false
      - host: xmpp.ra-itech.ru
        port: 5349
        type: turns
        transport: tcp
        restricted: true
  mod_vcard: {}
  mod_vcard_xupdate: {}
  mod_version:
    show_os: false
  mod_pubsub:
    access_createnode: pubsub_createnode
    plugins:
      - flat
      - pep
    force_node_config:
      ## Avoid buggy clients to make their bookmarks public
      storage:bookmarks:
        access_model: whitelist
  mod_proxy65:
    access: c2s
    max_connections: 50
    port: 7788
    shaper: fast
  mod_http_fileserver:
    accesslog: /opt/ejabberd/logs/access.log
    docroot:
      /files: /opt/fileserver
  mod_http_upload:
    access: c2s
    docroot: /opt/fileserver
    put_url: "https://@HOST@:5443/upload"
    get_url: "https://@HOST@:5443/files"
  mod_mam:
    access_preferences: c2s
    db_type: sql

listen:
  - port: 5222
    ip: "::"
    module: ejabberd_c2s
    shaper: c2s_shaper
    access: c2s
    max_stanza_size: 262144
    starttls: true
    allow_unencrypted_sasl2: false
    cafile: /etc/ejabberd/ca.pem
    starttls_required: true
    tls_verify: true

  - port: 5223
    ip: "::"
    module: ejabberd_c2s
    shaper: c2s_shaper
    access: c2s
    max_stanza_size: 262144
    starttls: true
    starttls_required: true
    tls_verify: false

  - port: 3478
    transport: udp
    module: ejabberd_stun
    use_turn: true
    turn_min_port: 49152
    turn_max_port: 65535
    turn_ip: 64.188.58.223

  - port: 5349
    transport: tcp
    module: ejabberd_stun
    use_turn: true
    tls: true
    turn_min_port: 49152
    turn_max_port: 65535
    ip: 64.188.58.223
    turn_ip: 64.188.58.223

  - port: 5443
    ip: "::"
    transport: tcp
    module: ejabberd_http
    tls: true
    request_handlers:
      /files: mod_http_fileserver
      /upload: mod_http_upload
      /bosh: mod_bosh