merged from references

EXTRAS/example-configurations/conf.d/60-modules.yml

@@ -21,37 +21,46 @@ modules:
     websocket_url: "ws://@HOST@:5443/websocket"
   ## mod_delegation: {} # for xep0356
   mod_disco: {}
-  mod_stun_disco: {}
-  ## mod_echo: {}
-  ## mod_irc: {}
-  mod_http_fileserver:
-    default_content_type: "text/html"
-    docroot: "/var/www/"
-    directory_indices:
-      - "index.html"
+  mod_fail2ban: {}
+#  mod_stun_disco: {} #--> see 50-stun-turn.yml
+#  mod_http_api: {}
+#  mod_http_fileserver:{} 
   ##  docroot: "/var/www"
   ##  accesslog: "/home/ejabberd/logs/access.log"
+  #mod_http_api: {}
   mod_http_upload:
     put_url: "https://@HOST@:5443/upload"
     thumbnail: false # otherwise needs ejabberd to be compiled with libgd support
     max_size: 524288 # 5MB
+    custom_headers:
+      "Access-Control-Allow-Origin": "https://@HOST@"
+      "Access-Control-Allow-Methods": "GET,HEAD,PUT,OPTIONS"
+      "Access-Control-Allow-Headers": "Content-Type"
   mod_http_upload_quota:
-    max_days: 3 
+    max_days: 7 
   mod_last: {}
   ## XEP-0313: Message Archive Management
   ## You might want to setup a SQL backend for MAM because the mnesia database is
   ## limited to 2GB which might be exceeded on large servers
   ## mod_mam: {} # for xep0313, mnesia is limited to 2GB, better use an SQL backend
-  mod_mam: {}
+  mod_mam:
+    assume_mam_usage: true
+    default: always
   mod_muc:
-    ## host: "conference.@HOST@"
     access:
       - allow
     access_admin:
       - allow: admin
     access_create: muc_create
     access_persistent: muc_create
-  mod_muc_admin: {}
+    access_mam:
+      - allow
+    default_room_options:
+      mam: true
+      persistent: true
+      public: false
+      public_list: false
+      allow_subscription: true  # enable MucSub
   ## mod_muc_log: {}
   ## mod_multicast: {}
   mod_offline:
@@ -62,29 +71,24 @@ modules:
   ##   interval: 60
   mod_privacy: {}
   mod_private: {}
-  mod_proxy65: {}
+  mod_proxy65:
+    access: local
+    max_connections: 5
   mod_pubsub:
     access_createnode: pubsub_createnode
-    ## reduces resource comsumption, but XEP incompliant
     ignore_pep_from_offline: true
-    ## XEP compliant, but increases resource comsumption
-    ## ignore_pep_from_offline: false
     last_item_cache: false
-    max_items_node: 10
     plugins:
       - "flat"
-      - "pep" # pep requires mod_caps
+      - "pep"
     force_node_config:
-#      ## Avoid using OMEMO by default because it
-#      ## introduces a lot of hard-to-track problems
-#      "eu.siacs.conversations.axolotl.*":
-#        access_model: whitelist
-      ## Avoid buggy clients to make their bookmarks public
+      "eu.siacs.conversations.axolotl.*":
+        access_model: open
       "storage:bookmarks":
-        access_model: whitelist
+        access_model: whitelist  
   mod_push: {}
   mod_push_keepalive: {}
-  mod_register:
+  #mod_register:
     ##
     ## Protect In-Band account registrations with CAPTCHA.
     ##
@@ -97,9 +101,9 @@ modules:
     ## After successful registration, the user receives
     ## a message with this subject and body.
     ##
-    welcome_message:
-      subject: "Welcome!"
-      body: |-
+  #  welcome_message:
+  #    subject: "Welcome!"
+  #    body: |-
         Hi.
         Welcome to this XMPP server.
     ##
@@ -111,50 +115,24 @@ modules:
     ##
     ## Only clients in the server machine can register accounts
     ##
-    ip_access: trusted_network
+  #  ip_access: trusted_network
     ##
     ## Local c2s or remote s2s users cannot register accounts
     ##
     ##   access_from: deny
-    access: register
+  #  access: register
 #  mod_roster: {}
+  mod_s2s_dialback: {}
   mod_roster:
     versioning: true
   mod_shared_roster: {}
+  ## mod_sic: {}
   ## mod_stats: {}
-  ## mod_time: {}
+  mod_time: {}
   mod_vcard:
     search: false
   mod_vcard_xupdate: {}
-  mod_version: {}
-  mod_stream_mgmt: {}
-  ##   Non-SASL Authentication (XEP-0078) is now disabled by default
-  ##   because it's obsoleted and is used mostly by abandoned
-  ##   client software
-  ## mod_legacy_auth: {}
-  ##   The module for S2S dialback (XEP-0220). Please note that you cannot
-  ##   rely solely on dialback if you want to federate with other servers,
-  ##   because a lot of servers have dialback disabled and instead rely on
-  ##   PKIX authentication. Make sure you have proper certificates installed
-  ##   and check your accessibility at https://check.messaging.one/
-  mod_s2s_dialback: {}
-  mod_http_api: {}
-  mod_fail2ban: {}
-
-##
-## Enable modules with custom options in a specific virtual host
-##
-## host_config:
-##   "localhost":
-##     modules:
-##       mod_echo:
-##         host: "mirror.localhost"
-
-##
-## Enable modules management via ejabberdctl for installation and
-## uninstallation of public/private contributed modules
-## (enabled by default)
-##
-
-
-allow_contrib_modules: true
+  mod_version:
+    show_os: false
+  mod_stream_mgmt:
+    resend_on_timeout: if_offline