Faka iXMPP (Jabber) iseva ngeProsody [ihlaziyiwe]

Iiphakeji zeProsody zikwindawo yokugcina izinto zeDebian, kodwa abaphuhlisi bale software balungiselele indawo yokugcina izinto zeDebian kunye neziphumo eziqukethe iiphakeji zamva nje kunye neemodyuli ezongezelelweyo, esinokuzisebenzisa ngolu hlobo lulandelayo:

echo "deb http://packages.prosody.im/debian eyona nto izinzile" | Isudo tee -a /etc/apt/source.list wget http://prosody.im/files/prosody-debian-packages.key -O- | Isongezo esingundoqo-isudo apt sokuhlaziya

Nje ukuba indawo yokugcina yongezwe, sinokuqhubeka nokufaka iprosesy (ngokudibanisa ukongeza iimodyuli zokuzisebenzisa sasl njengesixhobo sokuqinisekisa ukuba kunyanzelekile, esivumela ukudibanisa iprosody kunye pam, I-LDAP, njl).

I-sudo aptitude ukufaka i-sasl2-bin libsasl2-iimodyuli-ldap prosody liblua5.1- {sec0, cyrussasl0, umcimbi-prosody0}

Siqhubeka nokuvelisa izatifikethi ezityikityiwe kwindawo yethu:

cd / njl / prosody / cert sudo openssl req -new -x509 -days 1095 -nodes -out "mydomain.cu.cert" -keyout "mydomain.cu.key"

Iwizard izakusibuza uthotho lweedatha, apho eyona ibaluleke kakhulu “ligama eliqhelekileyo (umzekelo umncedisi FQDN okanye igama LAKHO) ”apho kuya kufuneka sibeke indawo yethu, njengoko siza kuyisebenzisa kwicandelo VirtualHost ifayile yoqwalaselo.

Ukongeza, ukuba kwiserver apho sifaka khona prosody esiyilungiselele iptables Ngokungawamkeli umgaqo-nkqubo, kufuneka sivule amazibuko afunekayo kwinethiwekhi yethu, umzekelo:

Iimpawu ze-sudo -I-INPUT -i lo -j ACCEPT sudo iptables -A INPUT -i eth1 -s 192.168.0.0/24 -p tcp -m tcp -m state --state ESTABLISHED, RELATED -j ACCEPT sudo iptables -A INPUT - Ndingu-eth1 -s 192.168.0.0/24 -p tcp -m tcp -m multiport -dports 5222,5223,5269 -m state -state NEW -j ACCEPT

Emva koko, siyaqhubeka nokutshintsha eminye imigca yefayile yoqwalaselo, ekufuneka siyilungiselele /etc/prosody/prosody.cfg.lua kujongeka ngoluhlobo:

amazibuko = {5222, 5269} ssl_ports = {5223} admins = {"juan@mydomain.cu", "pedro@mydomain.cu"} use_libevent = yinyani; -Ukhetho olungagqibekanga lusekwe kukhetho () lomsebenzi, endaweni yokuba libevent lisebenzise i-epoll (), esebenzayo ngakumbi neyoyikekayo. iimodyuli_enabled = {"uluhlu"; "saslauth"; "tls"; "ukucofa kwakhona"; "idiski"; "ngasese"; "vcard"; "imfihlo"; "ucinezelo"; "legacyauth"; "uguqulelo"; "ixesha elongezelelweyo"; "ixesha"; "ping"; "ipep"; "irejista"; -Ungayikhubazi le modyuli, ayivumeli ukubhalisa kuphela kodwa kunye nokutshintsha amagama agqithisiweyo "adhoc"; "umlawuli_ukhetho"; "posix"; "bosh"; - yongeza lo mgca ukuba ufuna ukwenza i-jabber ngaphezulu kwe-http}; vumela ubhaliso = ubuxoki; -Ukhubazekile ngenxa yokhuseleko - tshintsha ube yinyani ukuba ufuna ukwenza ukwenziwa kweeakhawunti kumthengi uqobo ssl = {key = "/etc/prosody/certs/localhost.key"; isatifikethi = "/etc/prosody/certs/localhost.cert"; } ukugcinwa = "ngaphakathi"; -Ukugcina okungagqibekanga yifayile ye-xml-ngokhetho sinokusebenzisa indlela yokugcina ye- "sql" - oku kuvumela ukusebenzisa i-SQLite, i-MySQL okanye i-PostgreSQL njenge-backend (nangona ezinye iiparameter kufuneka zongezwe) ungqinisiso = "ngaphakathi_hashed"; -Sinokusebenzisa "ukucacisa ngaphakathi" ukuba umxhasi akayxhasi i-SCRAM-SHA-1- ukuba sifuna ukusebenzisa indlela ye-sasl ukusebenzisa kamva i-LDAP, kufuneka sisebenzise "cyrus" log = {error = "/ var / log / prosody / isiphumlisi. ulwazi = "/var/log/prosody/prosody.log"; } ifayili = "/var/run/prosody/prosody.pid"; I-VirtualHost "indawo yangaphakathi" VirtualHost "mydomain.cu" ssl = {key = "/etc/prosody/certs/mydomain.cu.key"; isatifikethi = "/etc/prosody/certs/mydomain.cu.crt"; }

Nje ukuba ifayile yoqwalaselo iguqulwe, siqala inkonzo kwakhona:

Ukukhupha inkonzo yothando

Isudo prosodyctl adduser juan@mydomain.cu sudo prosodyctl adduser pedro@mydomain.cu

Isimo se-prosodyctl

Iprosody isebenza ngePID 1310

Ukucwangciswa komthengi

Amanqaku