mish/prosody
0
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Fix TLS cert domain mismatch: VirtualHost now matches cert domain

Browse Source 
VirtualHost changed from "guschin.info" to "xmpp.guschin.info" to match
the Let's Encrypt certificate. Moved certificates directive before
VirtualHost block. Removed misplaced default_realm and global ssl block.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
mguschin
2026-03-01 19:31:03 +03:00
parent bdcb7e1709
commit 6015367332
1 changed files with 7 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
data/prosody/configuration/prosody.cfg.lua
View File

@@ -1,7 +1,7 @@
-- Prosody XMPP Server Configuration -- Prosody XMPP Server Configuration
-- Domain: xmpp.guschin.info -- Domain: xmpp.guschin.info
admins = { "admin@guschin.info" } admins = { "admin@xmpp.guschin.info" }
modules_enabled = { modules_enabled = {
-- Generally required -- Generally required
@@ -59,30 +59,20 @@ https_ports = { 5281 }
c2s_require_encryption = true c2s_require_encryption = true
s2s_require_encryption = false s2s_require_encryption = false
-- TLS/SSL options for all connections -- Authentication
ssl = {
protocol = "tlsv1_2+";
ciphers = "HIGH:!aNULL:!MD5";
options = { "no_sslv2", "no_sslv3", "no_compression", "cipher_server_preference" };
}
-- Disable SASLauth external authentication
authentication = "internal_plain" authentication = "internal_plain"
-- Certificates directory (global, before VirtualHost)
certificates = "/etc/prosody/certs"
-- Virtual host definition -- Virtual host definition
VirtualHost "guschin.info" VirtualHost "xmpp.guschin.info"
ssl = { ssl = {
key = "/etc/prosody/certs/xmpp.guschin.info.key"; key = "/etc/prosody/certs/xmpp.guschin.info.key";
certificate = "/etc/prosody/certs/xmpp.guschin.info.crt"; certificate = "/etc/prosody/certs/xmpp.guschin.info.crt";
} }
-- Component for MUC (Multi-User Chat) -- Component for MUC (Multi-User Chat)
Component "muc.guschin.info" "muc" Component "muc.xmpp.guschin.info" "muc"
modules_enabled = { "muc_mam" } modules_enabled = { "muc_mam" }
storage = "sql" storage = "sql"
-- Set a default realm for the server
default_realm = "guschin.info"
-- Certificates
certificates = "/etc/prosody/certs"