79 lines
2.2 KiB
Markdown
79 lines
2.2 KiB
Markdown
|
# Changelog
|
||
|
|
|
||
|
|
All notable changes to this project will be documented in this file.
|
||
|
|
|
||
|
|
## [Unreleased]
|
||
|
|
|
||
|
|
### Bug Fixes
|
||
|
|
|
||
|
|
- Fix certs path.
|
||
|
|
- Fix self signed certs.
|
||
|
|
- Fix su prosody.
|
||
|
|
- Fix su prosody (2).
|
||
|
|
- Fix su prosody (3).
|
||
|
|
- Fix su prosody (4).
|
||
|
|
- Fix symlinks.
|
||
|
|
- Fixed tls config..
|
||
|
|
- Fix TLS cert domain mismatch: VirtualHost now matches cert domain
|
||
|
|
|
||
|
|
VirtualHost changed from "guschin.info" to "xmpp.guschin.info" to match
|
||
|
|
the Let's Encrypt certificate. Moved certificates directive before
|
||
|
|
VirtualHost block. Removed misplaced default_realm and global ssl block.
|
||
|
|
|
||
|
|
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
||
|
|
|
||
|
|
### Changes
|
||
|
|
|
||
|
|
- Initial commit
|
||
|
|
- Init.
|
||
|
|
- MySQL running on host.
|
||
|
|
- Network.
|
||
|
|
- Extra hosts.
|
||
|
|
- Change ip.
|
||
|
|
- Nginx.
|
||
|
|
- Certs in docker compose.
|
||
|
|
- Certs volume.
|
||
|
|
- Certs path.
|
||
|
|
- Nginx ssl.
|
||
|
|
- Lua-unbound.
|
||
|
|
- Certs volume.
|
||
|
|
- Delete self signed certs.
|
||
|
|
- Delete user prosody from entrypoing..
|
||
|
|
- Using existing certs..
|
||
|
|
- Remove obsolete version attribute from docker-compose.yml
|
||
|
|
|
||
|
|
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
||
|
|
- Mount only xmpp cert dirs to fix letsencrypt permission errors
|
||
|
|
|
||
|
|
Mount specific live/ and archive/ subdirectories instead of all of
|
||
|
|
/etc/letsencrypt to avoid Prosody scanning root-only directories
|
||
|
|
(accounts/, archive/ for other domains). Also remove allow_registration.
|
||
|
|
|
||
|
|
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
||
|
|
|
||
|
|
### Features
|
||
|
|
|
||
|
|
- Enable s2s_require_encryption to match s2s_secure_auth
|
||
|
|
|
||
|
|
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
||
|
|
- Add ca-certificates to fix s2s TLS verification
|
||
|
|
|
||
|
|
Without CA certs, Prosody cannot verify remote servers' certificates,
|
||
|
|
causing all server-to-server connections to fail with "not trusted".
|
||
|
|
|
||
|
|
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
||
|
|
- Enable mod_mam for persistent direct message archiving
|
||
|
|
|
||
|
|
Messages are stored indefinitely in MySQL.
|
||
|
|
|
||
|
|
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
||
|
|
- Add guschin.info VirtualHost alongside xmpp.guschin.info
|
||
|
|
|
||
|
|
Users can now register as name@guschin.info or name@xmpp.guschin.info.
|
||
|
|
Added Let's Encrypt cert mounting and install for guschin.info domain.
|
||
|
|
Refactored entrypoint cert install into reusable function.
|
||
|
|
|
||
|
|
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
||
|
|
|
||
|
|
|