149 lines
2.9 KiB
Markdown
149 lines
2.9 KiB
Markdown
# Enable ports
|
|
|
|
These are the ports needed for ejabberd to work.
|
|
Ports 80 and 443 are needed for deploying and SSL certificate with certbot.
|
|
|
|
```shell
|
|
declare -a ports=("80" "443" "5222:5443/udp" "5222:5443/tcp" "3478" "49152:65535/udp" "49152:65535/tcp")
|
|
|
|
for port in "${ports[@]}"; do ufw allow "$port" ; done
|
|
ufw reload
|
|
```
|
|
|
|
# Download ejabberd
|
|
|
|
Debian conveniently offers the packages in the official repositories!
|
|
|
|
```shell
|
|
apt update
|
|
apt install ejabberd python3-certbot-nginx
|
|
systemctl enable --now ejabberd
|
|
```
|
|
|
|
# Generate certs
|
|
|
|
This is from [Nerd on the Street](https://github.com/nerdonthestreet).
|
|
Change the DOMAIN variable to your preference.
|
|
|
|
```shell
|
|
DOMAIN="example.org"
|
|
|
|
# Set the domain names you want here, stun & turn are required for calls
|
|
declare -a subdomains=("" "conference." "proxy." "pubsub." "upload." "stun." "turn.")
|
|
|
|
for i in "${subdomains[@]}"; do
|
|
certbot --nginx -d $i$DOMAIN certonly
|
|
mkdir -p /etc/ejabberd/certs/$i$DOMAIN
|
|
cp /etc/letsencrypt/live/$i$DOMAIN/fullchain.pem /etc/ejabberd/certs/$i$DOMAIN
|
|
cp /etc/letsencrypt/live/$i$DOMAIN/privkey.pem /etc/ejabberd/certs/$i$DOMAIN
|
|
done
|
|
```
|
|
|
|
# Directories and permissions
|
|
|
|
```shell
|
|
chown -R ejabberd:ejabberd /etc/ejabberd/certs
|
|
mkdir -p /var/www/upload
|
|
chown -R ejabberd:ejabberd /var/www/upload
|
|
```
|
|
|
|
# Base configuration
|
|
|
|
Fill with your domain.
|
|
|
|
```yaml
|
|
hosts:
|
|
- example.org
|
|
```
|
|
|
|
Enable the path for previously generated certs.
|
|
|
|
```yaml
|
|
certfiles:
|
|
- "/etc/ejabberd/certs/*/*.pem"
|
|
```
|
|
|
|
Note: Remember to `systemctl restart ejabberd` each time you modify `/etc/ejabberd.yml`.
|
|
|
|
# Example for some configs (optional)
|
|
|
|
## Admin user
|
|
|
|
Register admin user.
|
|
|
|
```shell
|
|
su -c "ejabberdctl register admin example.org ADMIN_PASSWORD" ejabberd
|
|
systemctl restart ejabberd
|
|
```
|
|
|
|
Enable admin user.
|
|
|
|
```yaml
|
|
acl:
|
|
admin:
|
|
user: admin
|
|
```
|
|
|
|
## Message archive and http upload
|
|
|
|
Uncomment for compliance with XMPP standards.
|
|
|
|
```yaml
|
|
mod_http_upload:
|
|
put_url: https://@HOST@:5443/upload
|
|
docroot: /var/www/upload
|
|
custom_headers:
|
|
"Access-Control-Allow-Origin": "https://@HOST@"
|
|
"Access-Control-Allow-Methods": "GET,HEAD,PUT,OPTIONS"
|
|
"Access-Control-Allow-Headers": "Content-Type"
|
|
```
|
|
|
|
Enable message archive.
|
|
|
|
```yaml
|
|
mod_mam:
|
|
assume_mam_usage: true
|
|
default: always
|
|
```
|
|
|
|
## Postgresql database
|
|
|
|
Set postgresql as database.
|
|
|
|
```shell
|
|
sudo -i -u postgres psql -c "CREATE USER ejabberd WITH PASSWORD 'DB_PASSWORD';"
|
|
sudo -i -u postgres psql -c "CREATE DATABASE ejabberd OWNER ejabberd;"
|
|
```
|
|
|
|
```yaml
|
|
sql_type: pgsql
|
|
sql_server: "localhost"
|
|
sql_database: "ejabberd"
|
|
sql_username: "ejabberd"
|
|
sql_password: "DB_PASSWORD"
|
|
default_db: sql
|
|
```
|
|
|
|
## Call/Videocall support
|
|
|
|
Enable this module
|
|
|
|
```yaml
|
|
ejabberd_stun:
|
|
```
|
|
|
|
## Registration
|
|
|
|
Enable registration in your server
|
|
|
|
```yaml
|
|
mod_register:
|
|
```
|
|
|
|
Otherwise registered via:
|
|
|
|
```shell
|
|
su -c "ejabberdctl register USERNAME example.org USER_PASSWORD" ejabberd
|
|
```
|
|
|
|
Note: Remember to `systemctl restart ejabberd` each time you modify `/etc/ejabberd.yml`.
|