Xmpp: Difference between revisions

From NURDspace
No edit summary
No edit summary
Line 20: Line 20:
/usr/bin/scp -C /etc/ssl/letsencrypt/space.nurdspace.nl/* root@xmpp.vm.nurd.space:/root/certificate/
/usr/bin/scp -C /etc/ssl/letsencrypt/space.nurdspace.nl/* root@xmpp.vm.nurd.space:/root/certificate/
# install into prosody & restart prosody
# install into prosody & restart prosody
/usr/bin/ssh root@xmpp.vm.nurd.space 'cp /root/certificate/public.key /var/lib/prosody/space.nurdspace.nl.crt && cp /root/certificate/private.key /var/lib/prosody/space.nurdspace.nl.key && /etc/init.d/prosody restart'</nowiki>
/usr/bin/ssh root@xmpp.vm.nurd.space 'cp /root/certificate/public.key /var/lib/prosody/space.nurdspace.nl.crt && \
                  cp /root/certificate/private.key /var/lib/prosody/space.nurdspace.nl.key && \
                  /etc/init.d/prosody restart'</nowiki>


* add user:
* add user:
** prosodyctl register USERNAME space.nurdspace.nl PASSWORD
** prosodyctl register USERNAME space.nurdspace.nl PASSWORD

Revision as of 17:17, 8 August 2022

XMPP / Jabber: WHY?!

With this protocol (xmpp == jabber) you can chat with other people that have such an account. Not neccessarily on the nurdspace server; any account will do. As the nurdspace server uses ssl/tls/something-encryption, it should be safe as well to use. Only when someone hacks either the nurdspace-xmpp-server or the xmpp-server of the opponent you're chatting with (well or your computer or the computer of the opponent), only then your messages can be read.

It is also convenient to have if you want people in #nurds (irc) to be able to send you a message by using "!summon nickname text" (contact flok for that).


technical details

  • runs on xmpp.vm.nurd.space
  • listens on xmpp.vm.nurd.space and also allows space.nurdspace.nl domain
  • certificate is installed from revproxy01 from /etc/dehydrated/updateCertsEnRestart.sh:
# XMPP/Jabber server
# copy key + certificate
/usr/bin/scp -C /etc/ssl/letsencrypt/space.nurdspace.nl/* root@xmpp.vm.nurd.space:/root/certificate/
# install into prosody & restart prosody
/usr/bin/ssh root@xmpp.vm.nurd.space 'cp /root/certificate/public.key /var/lib/prosody/space.nurdspace.nl.crt && \
                  cp /root/certificate/private.key /var/lib/prosody/space.nurdspace.nl.key && \
                  /etc/init.d/prosody restart'
  • add user:
    • prosodyctl register USERNAME space.nurdspace.nl PASSWORD