Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://social.harpia.red/objects/83d6496b-6f12-4777-8d85-7b8bfe9b7145">Kari'boka (kariboka@social.harpia.red)'s status on Monday, 30-Sep-2024 05:02:07 JST</a><a href="https://social.harpia.red/users/kariboka" title="kariboka@social.harpia.red"><img src="https://gnusocial.jp/avatar/250896-48-20240519200601.webp" width="48" height="48" alt="Kari'boka" style="position: absolute; left: 0; top: 0;">Kari'boka</a><div><a href="https://gnusocial.jp/notice/7337711" rel="in-reply-to">in reply to</a><ul><li></ul></div></section><article><p>Volte para o diretorio superio cd ..<br>e crie o seguinte arquivo:  </p><p>ejabberd.yml  </p>###
###              ejabberd configuration file
###
### The parameters used in this configuration file are explained at
###
###       <a href="https://docs.ejabberd.im/admin/configuration">https://docs.ejabberd.im/admin/configuration</a>
###
### The configuration file is written in YAML.
### *******************************************************
### *******           !!! WARNING !!!               *******
### *******     YAML IS INDENTATION SENSITIVE       *******
### ******* MAKE SURE YOU INDENT SECTIONS CORRECTLY *******
### *******************************************************
### Refer to <a href="http://en.wikipedia.org/wiki/YAML">http://en.wikipedia.org/wiki/YAML</a> for the brief description.
##### Substitua todos os dominio.tld no arquivo com o se dominio. No total são 6 vezes que ele aparece aqui.
## Na seção Certfiles, aponte para as pastas corretas de acordo com a sua organização dos subdiretorios que foi passado na variavel ${CERT_DIRECTORY} no docker. Todos os certificados e chaves do dominio principal e dos subdominios precisa estar disponivel.
## Se você mudar a senha do banco, substitua também no final desse arquivohosts:
  - dominio.tldhost_config:
  dominio.tld:
    auth_method: [external]
    extauth_program: "/opt/ejabberd/auth/mastodon.py"
    auth_use_cache: true # 1h/3600s defaultloglevel: infodefine_macro:
  ## TLS configuration
  TLS_CIPHERS: ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
  TLS_OPTIONS:
    - no_sslv3
    - no_tlsv1
    - no_tlsv1_1
    - cipher_server_preference
    - no_compressionc2s_ciphers: TLS_CIPHERS
s2s_ciphers: TLS_CIPHERS
c2s_protocol_options: TLS_OPTIONS
s2s_protocol_options: TLS_OPTIONS
s2s_use_starttls: required## Disabling digest-md5 SASL authentication. digest-md5 requires plain-text
## password storage (see auth_password_format option).
disable_sasl_mechanisms:
  - digest-md5
  - X-OAUTH2## Store the plain passwords or hashed for SCRAM:
<a href="https://social.harpia.red/tag/auth_password_format" rel="tag">#auth_password_format</a>: scram
<a href="https://social.harpia.red/tag/auth_scram_hash" rel="tag">#auth_scram_hash</a>: sha512## If you already have certificates, list them here
certfiles:
  # Certs
  - /etc/ssl/certificates/&lt;pasta_com_certificados&gt;/*.crt
  # Keys
  - /etc/ssl/certificates/&lt;pasta_com_chaves&gt;/*.keylisten:
  -
    port: 5222
    ip: "::"
    module: ejabberd_c2s
    max_stanza_size: 262144
    shaper: c2s_shaper
    access: c2s
    starttls_required: true
    protocol_options: TLS_OPTIONS
  -
    port: 5223
    ip: "::"
    module: ejabberd_c2s
    max_stanza_size: 262144
    shaper: c2s_shaper
    access: c2s
    tls: true
    protocol_options: TLS_OPTIONS
  -
    port: 5269
    ip: "::"
    module: ejabberd_s2s_in
    max_stanza_size: 524288
    shaper: s2s_shaper
  -
    port: 5270
    ip: "::"
    module: ejabberd_s2s_in
    max_stanza_size: 524288
    shaper: s2s_shaper
    tls: true
    protocol_options: TLS_OPTIONS
  -
    port: 5443
    ip: "::"
    module: ejabberd_http
    tls: true
    protocol_options: TLS_OPTIONS
    request_handlers:
      /admin: ejabberd_web_admin
      /api: mod_http_api
      /http-bind: mod_bosh
      /captcha: ejabberd_captcha
      /upload: mod_http_upload
      /ws: ejabberd_http_ws
  -
    port: 5280
    ip: "::"
    module: ejabberd_http
    request_handlers:
    #  /admin: ejabberd_web_admin 
      /.well-known/acme-challenge: ejabberd_acme
  -
    port: 3478
    ip: "::"
    transport: udp
    module: ejabberd_stun
    use_turn: true
    ## The server's public IPv4 address:
    # turn_ipv4_address: "203.0.113.3"
    ## The server's public IPv6 address:
    # turn_ipv6_address: "2001:db8::3"
#  -
#    port: 1883
#    ip: "::"
#    module: mod_mqtt
#    backlog: 1000acme:
  auto: false
  ## Staging environment
  ca_url: <a href="https://acme-staging-v02.api.letsencrypt.org/directory">https://acme-staging-v02.api.letsencrypt.org/directory</a>
  ## Production environment (the default):
#  ca_url: <a href="https://acme-v02.api.letsencrypt.org/directory">https://acme-v02.api.letsencrypt.org/directory</a>acl:
  local:
    user_regexp: ""
  loopback:
    ip:
      - 127.0.0.0/8
      - ::1/128
  admin:
    user: adminaccess_rules:
  local:
    allow: local
  c2s:
    deny: blocked
    allow: all
  announce:
    allow: admin
  configure:
    allow: admin
  muc_create:
    allow: local
  pubsub_createnode:
    allow: local
  trusted_network:
    allow: loopbackapi_permissions:
  "console commands":
    from: ejabberd_ctl
    who: all
    what: "*"
  "webadmin commands":
    from: ejabberd_web_admin
    who: admin
    what: "*"
  "admin access":
    who:
      access:
        allow:
          - acl: loopback
          - acl: admin
      oauth:
        scope: "ejabberd:admin"
        access:
          allow:
            - acl: loopback
            - acl: admin
    what:
      - "*"
      - "!stop"
      - "!start"
  "public commands":
    who:
      ip: 127.0.0.1/8
    what:
      - status
      - connected_users_numbershaper:
  normal:
    rate: 3000
    burst_size: 20000
  fast: 100000shaper_rules:
  max_user_sessions: 10
  max_user_offline_messages:
    5000: admin
    100: all
  c2s_shaper:
    none: admin
    normal: all
  s2s_shaper: fastmodules:
  mod_adhoc: {}
  mod_admin_extra: {}
  mod_announce:
    access: announce
  mod_avatar: {}
  mod_blocking: {}
  mod_bosh: {}
  mod_caps: {}
  mod_carboncopy: {}
  mod_client_state: {}
  mod_configure: {}
  mod_disco:
    server_info:
      - modules: all
        name: abuse-addresses
        urls:
          - mailto:xmpp@dominio.tld
      - modules: all
        name: support-addresses
        urls:
          - mailto:xmpp@dominio.tld
      - modules: all
        name: admin-addresses
        urls:
          - mailto:xmpp@dominio.tld
  mod_fail2ban: {}
  mod_host_meta:
    bosh_service_url: "https://xmpp.@HOST@/http-bind"
    websocket_url: "wss://xmpp.@HOST@/ws"
  mod_http_api: {}
  mod_http_upload:
#    put_url: https://upload.@HOST@
    put_url: https://xmpp.@HOST@/upload
#    put_url: https://@HOST@:5443/upload
#    hosts:
#      - xmpp.@HOST@
#    docroot: /var/www/upload
    custom_headers:
      "Access-Control-Allow-Origin": "*"
      "Access-Control-Allow-Methods": "GET,HEAD,PUT,OPTIONS"
      "Access-Control-Allow-Headers": "Content-Type"
  mod_last: {}
  mod_mam:
    ## Mnesia is limited to 2GB, better to use an SQL backend
    ## For small servers SQLite is a good fit and is very easy
    ## to configure. Uncomment this when you have SQL configured:
    db_type: sql
    assume_mam_usage: true
    default: always
#  mod_mqtt: {}
  mod_muc:
    host: chat.dominio.tld
    access:
      - allow
    access_admin:
      - allow: admin
    access_create: muc_create
    access_persistent: muc_create
    access_mam:
      - allow
    default_room_options:
      mam: true
  mod_muc_admin: {}
  mod_offline:
    access_max_user_messages: max_user_offline_messages
  mod_ping: {}
  mod_privacy: {}
  mod_private: {}
  mod_proxy65:
    access: local
    max_connections: 5
  mod_pubsub:
    access_createnode: pubsub_createnode
    plugins:
      - flat
      - pep
    force_node_config:
      ## Avoid buggy clients to make their bookmarks public
      storage:bookmarks:
        access_model: whitelist
  mod_push: {}
  mod_push_keepalive: {}
  mod_register:
    ## Only accept registration requests from the "trusted"
    ## network (see access_rules section above).
    ## Think twice before enabling registration from any
    ## address. See the Jabber SPAM Manifesto for details:
    ## <a href="https://github.com/ge0rg/jabber-spam-fighting-manifesto">https://github.com/ge0rg/jabber-spam-fighting-manifesto</a>
    ip_access: trusted_network
  mod_roster:
    versioning: true
  mod_s2s_dialback: {}
  mod_shared_roster: {}
  mod_stream_mgmt:
    resend_on_timeout: if_offline
  mod_stun_disco: {}
  mod_vcard: {}
  mod_vcard_xupdate: {}
  mod_version:
    show_os: falsesql_type: pgsql
sql_server: "postgres"
sql_database: "ejabberd"
sql_username: "ejabberd"
sql_password: "ejabberdpassword"
default_db: sql### Local Variables:
### mode: yaml
### End:
### vim: set filetype=yaml tabstop=8</article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/3747937#notice-7337733">In conversation</a><time datetime="2024-09-30T05:02:07+09:00" title="Monday, 30-Sep-2024 05:02:07 JST">about 2 months ago</time> <span>from <span><a href="https://social.harpia.red/objects/83d6496b-6f12-4777-8d85-7b8bfe9b7145" rel="external" title="Sent from social.harpia.red via ActivityPub">social.harpia.red</a></span></span><a href="https://social.harpia.red/objects/83d6496b-6f12-4777-8d85-7b8bfe9b7145">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/837654">Untitled attachment</a></label><br></li><li><article><header><div>Domain not in remote thumbnail source whitelist: docs.ejabberd.im</div><h5><a href="https://docs.ejabberd.im/admin/configuration/">Configuring ejabberd - ejabberd Docs</a></h5><div></div></header><div></div><footer></footer></article></li><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://en.wikipedia.org/wiki/YAML">YAML</a></h5><div></div></header><div>YAML ( ; see § History and name) is a human-readable data serialization language. It is commonly used for configuration files and in applications where data are being stored or transmitted. YAML targets many of the same communications applications as Extensible Markup Language (XML) but has a minimal syntax that intentionally differs from Standard Generalized Markup Language (SGML). It uses Python-style indentation to indicate nesting and does not require quotes around most string values (it also supports JSON style [...] and } mixed in the same file).
Custom data types are allowed, but YAML natively encodes scalars (such as strings, integers, and floats), lists, and associative arrays (also known as maps, dictionaries or hashes). These data types are based on the Perl programming language, though all commonly used high-level programming languages share very similar concepts. The colon-centered syntax, used for expressing key-value pairs, is inspired by electronic mail headers as defined in RFC 822, and the document separator ...</div><footer></footer></article></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/3238788">Untitled attachment</a></label><br></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/3238789">Untitled attachment</a></label><br></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/3238790">Untitled attachment</a></label><br></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/3238791">Untitled attachment</a></label><br></li><li><article><header><div>Domain not in remote thumbnail source whitelist: opengraph.githubassets.com</div><h5><a href="https://github.com/JabberSPAM/jabber-spam-fighting-manifesto">GitHub - JabberSPAM/jabber-spam-fighting-manifesto: Manifesto for Public Jabber server operators fighting against spam</a></h5><div></div></header><div>Manifesto for Public Jabber server operators fighting against spam - JabberSPAM/jabber-spam-fighting-manifesto</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Kari'boka (kariboka@social.harpia.red)'s status on Monday, 30-Sep-2024 05:02:07 JSTKari'boka
in reply to
- Kari'boka
Volte para o diretorio superio cd ..
e crie o seguinte arquivo:
ejabberd.yml
### ### ejabberd configuration file ### ### The parameters used in this configuration file are explained at ### ### https://docs.ejabberd.im/admin/configuration ### ### The configuration file is written in YAML. ### ******************************************************* ### ******* !!! WARNING !!! ******* ### ******* YAML IS INDENTATION SENSITIVE ******* ### ******* MAKE SURE YOU INDENT SECTIONS CORRECTLY ******* ### ******************************************************* ### Refer to http://en.wikipedia.org/wiki/YAML for the brief description. ### ## Substitua todos os dominio.tld no arquivo com o se dominio. No total são 6 vezes que ele aparece aqui. ## Na seção Certfiles, aponte para as pastas corretas de acordo com a sua organização dos subdiretorios que foi passado na variavel ${CERT_DIRECTORY} no docker. Todos os certificados e chaves do dominio principal e dos subdominios precisa estar disponivel. ## Se você mudar a senha do banco, substitua também no final desse arquivo hosts: - dominio.tld host_config: dominio.tld: auth_method: [external] extauth_program: "/opt/ejabberd/auth/mastodon.py" auth_use_cache: true # 1h/3600s default loglevel: info define_macro: ## TLS configuration TLS_CIPHERS: ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 TLS_OPTIONS: - no_sslv3 - no_tlsv1 - no_tlsv1_1 - cipher_server_preference - no_compression c2s_ciphers: TLS_CIPHERS s2s_ciphers: TLS_CIPHERS c2s_protocol_options: TLS_OPTIONS s2s_protocol_options: TLS_OPTIONS s2s_use_starttls: required ## Disabling digest-md5 SASL authentication. digest-md5 requires plain-text ## password storage (see auth_password_format option). disable_sasl_mechanisms: - digest-md5 - X-OAUTH2 ## Store the plain passwords or hashed for SCRAM: #auth_password_format: scram #auth_scram_hash: sha512 ## If you already have certificates, list them here certfiles: # Certs - /etc/ssl/certificates/<pasta_com_certificados>/*.crt # Keys - /etc/ssl/certificates/<pasta_com_chaves>/*.key listen: - port: 5222 ip: "::" module: ejabberd_c2s max_stanza_size: 262144 shaper: c2s_shaper access: c2s starttls_required: true protocol_options: TLS_OPTIONS - port: 5223 ip: "::" module: ejabberd_c2s max_stanza_size: 262144 shaper: c2s_shaper access: c2s tls: true protocol_options: TLS_OPTIONS - port: 5269 ip: "::" module: ejabberd_s2s_in max_stanza_size: 524288 shaper: s2s_shaper - port: 5270 ip: "::" module: ejabberd_s2s_in max_stanza_size: 524288 shaper: s2s_shaper tls: true protocol_options: TLS_OPTIONS - port: 5443 ip: "::" module: ejabberd_http tls: true protocol_options: TLS_OPTIONS request_handlers: /admin: ejabberd_web_admin /api: mod_http_api /http-bind: mod_bosh /captcha: ejabberd_captcha /upload: mod_http_upload /ws: ejabberd_http_ws - port: 5280 ip: "::" module: ejabberd_http request_handlers: # /admin: ejabberd_web_admin /.well-known/acme-challenge: ejabberd_acme - port: 3478 ip: "::" transport: udp module: ejabberd_stun use_turn: true ## The server's public IPv4 address: # turn_ipv4_address: "203.0.113.3" ## The server's public IPv6 address: # turn_ipv6_address: "2001:db8::3" # - # port: 1883 # ip: "::" # module: mod_mqtt # backlog: 1000 acme: auto: false ## Staging environment ca_url: https://acme-staging-v02.api.letsencrypt.org/directory ## Production environment (the default): # ca_url: https://acme-v02.api.letsencrypt.org/directory acl: local: user_regexp: "" loopback: ip: - 127.0.0.0/8 - ::1/128 admin: user: admin access_rules: local: allow: local c2s: deny: blocked allow: all announce: allow: admin configure: allow: admin muc_create: allow: local pubsub_createnode: allow: local trusted_network: allow: loopback api_permissions: "console commands": from: ejabberd_ctl who: all what: "*" "webadmin commands": from: ejabberd_web_admin who: admin what: "*" "admin access": who: access: allow: - acl: loopback - acl: admin oauth: scope: "ejabberd:admin" access: allow: - acl: loopback - acl: admin what: - "*" - "!stop" - "!start" "public commands": who: ip: 127.0.0.1/8 what: - status - connected_users_number shaper: normal: rate: 3000 burst_size: 20000 fast: 100000 shaper_rules: max_user_sessions: 10 max_user_offline_messages: 5000: admin 100: all c2s_shaper: none: admin normal: all s2s_shaper: fast modules: mod_adhoc: {} mod_admin_extra: {} mod_announce: access: announce mod_avatar: {} mod_blocking: {} mod_bosh: {} mod_caps: {} mod_carboncopy: {} mod_client_state: {} mod_configure: {} mod_disco: server_info: - modules: all name: abuse-addresses urls: - mailto:xmpp@dominio.tld - modules: all name: support-addresses urls: - mailto:xmpp@dominio.tld - modules: all name: admin-addresses urls: - mailto:xmpp@dominio.tld mod_fail2ban: {} mod_host_meta: bosh_service_url: "https://xmpp.@HOST@/http-bind" websocket_url: "wss://xmpp.@HOST@/ws" mod_http_api: {} mod_http_upload: # put_url: https://upload.@HOST@ put_url: https://xmpp.@HOST@/upload # put_url: https://@HOST@:5443/upload # hosts: # - xmpp.@HOST@ # docroot: /var/www/upload custom_headers: "Access-Control-Allow-Origin": "*" "Access-Control-Allow-Methods": "GET,HEAD,PUT,OPTIONS" "Access-Control-Allow-Headers": "Content-Type" mod_last: {} mod_mam: ## Mnesia is limited to 2GB, better to use an SQL backend ## For small servers SQLite is a good fit and is very easy ## to configure. Uncomment this when you have SQL configured: db_type: sql assume_mam_usage: true default: always # mod_mqtt: {} mod_muc: host: chat.dominio.tld access: - allow access_admin: - allow: admin access_create: muc_create access_persistent: muc_create access_mam: - allow default_room_options: mam: true mod_muc_admin: {} mod_offline: access_max_user_messages: max_user_offline_messages mod_ping: {} mod_privacy: {} mod_private: {} mod_proxy65: access: local max_connections: 5 mod_pubsub: access_createnode: pubsub_createnode plugins: - flat - pep force_node_config: ## Avoid buggy clients to make their bookmarks public storage:bookmarks: access_model: whitelist mod_push: {} mod_push_keepalive: {} mod_register: ## Only accept registration requests from the "trusted" ## network (see access_rules section above). ## Think twice before enabling registration from any ## address. See the Jabber SPAM Manifesto for details: ## https://github.com/ge0rg/jabber-spam-fighting-manifesto ip_access: trusted_network mod_roster: versioning: true mod_s2s_dialback: {} mod_shared_roster: {} mod_stream_mgmt: resend_on_timeout: if_offline mod_stun_disco: {} mod_vcard: {} mod_vcard_xupdate: {} mod_version: show_os: false sql_type: pgsql sql_server: "postgres" sql_database: "ejabberd" sql_username: "ejabberd" sql_password: "ejabberdpassword" default_db: sql ### Local Variables: ### mode: yaml ### End: ### vim: set filetype=yaml tabstop=8
In conversationabout 2 months ago from social.harpia.redpermalink
Attachments
1. Untitled attachment
2. Domain not in remote thumbnail source whitelist: docs.ejabberd.im
  Configuring ejabberd - ejabberd Docs
3. No result found on File_thumbnail lookup.
  YAML
  YAML ( ; see § History and name) is a human-readable data serialization language. It is commonly used for configuration files and in applications where data are being stored or transmitted. YAML targets many of the same communications applications as Extensible Markup Language (XML) but has a minimal syntax that intentionally differs from Standard Generalized Markup Language (SGML). It uses Python-style indentation to indicate nesting and does not require quotes around most string values (it also supports JSON style [...] and } mixed in the same file). Custom data types are allowed, but YAML natively encodes scalars (such as strings, integers, and floats), lists, and associative arrays (also known as maps, dictionaries or hashes). These data types are based on the Perl programming language, though all commonly used high-level programming languages share very similar concepts. The colon-centered syntax, used for expressing key-value pairs, is inspired by electronic mail headers as defined in RFC 822, and the document separator ...
4. Untitled attachment
5. Untitled attachment
6. Untitled attachment
7. Untitled attachment
8. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  GitHub - JabberSPAM/jabber-spam-fighting-manifesto: Manifesto for Public Jabber server operators fighting against spam
  Manifesto for Public Jabber server operators fighting against spam - JabberSPAM/jabber-spam-fighting-manifesto