From 4236bd38e44d0a3f7ab65e68fb263d2043fcddb8 Mon Sep 17 00:00:00 2001 From: mguschin Date: Sun, 10 May 2026 13:07:40 +0300 Subject: [PATCH] Use multi-SAN guschin.info cert for all hosts and components. Co-Authored-By: Claude Opus 4.7 --- data/prosody/configuration/prosody.cfg.lua | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/data/prosody/configuration/prosody.cfg.lua b/data/prosody/configuration/prosody.cfg.lua index bba51d6..fc491e3 100644 --- a/data/prosody/configuration/prosody.cfg.lua +++ b/data/prosody/configuration/prosody.cfg.lua @@ -97,19 +97,31 @@ VirtualHost "guschin.info" -- Secondary virtual host (user@xmpp.guschin.info) VirtualHost "xmpp.guschin.info" ssl = { - key = "/etc/prosody/certs/xmpp.guschin.info.key"; - certificate = "/etc/prosody/certs/xmpp.guschin.info.crt"; + key = "/etc/prosody/certs/guschin.info.key"; + certificate = "/etc/prosody/certs/guschin.info.crt"; } -- Component for MUC (Multi-User Chat) Component "muc.guschin.info" "muc" modules_enabled = { "muc_mam" } storage = "sql" + ssl = { + key = "/etc/prosody/certs/guschin.info.key"; + certificate = "/etc/prosody/certs/guschin.info.crt"; + } -- HTTP file upload (XEP-0363) — used by slidgram for Telegram→XMPP attachments Component "upload.guschin.info" "http_file_share" http_file_share_access = { "telegram.guschin.info", "guschin.info", "xmpp.guschin.info" } + ssl = { + key = "/etc/prosody/certs/guschin.info.key"; + certificate = "/etc/prosody/certs/guschin.info.crt"; + } -- Telegram gateway (slidgram) Component "telegram.guschin.info" component_secret = os.getenv("SLIDGRAM_COMPONENT_SECRET") + ssl = { + key = "/etc/prosody/certs/guschin.info.key"; + certificate = "/etc/prosody/certs/guschin.info.crt"; + }