Lightweight containerized prosody tooling + moved auth scripts + xmpp reconnect/auth stabilization

utilities/prosody/prosody.cfg.lua

@@ -0,0 +1,74 @@
+sasl_mechanisms = { "PLAIN", "SCRAM-SHA-1", "SCRAM-SHA-256" }
+
+daemonize = false
+pidfile = "/run/prosody/prosody.pid"
+
+admins = { "mm@zm.is" }
+
+modules_enabled = {
+  "disco";
+  "roster";
+  "saslauth";
+  "tls";
+  "blocklist";
+  "bookmarks";
+  "carbons";
+  "dialback";
+  "limits";
+  "pep";
+  "private";
+  "smacks";
+  "vcard4";
+  "vcard_legacy";
+  "cloud_notify";
+  "csi_simple";
+  "invites";
+  "invites_adhoc";
+  "invites_register";
+  "ping";
+  "time";
+  "uptime";
+  "version";
+  "mam";
+  "turn_external";
+  "admin_adhoc";
+  "admin_shell";
+  "announce";
+  "auth_external_insecure";
+  "http";
+}
+
+s2s_secure_auth = true
+
+limits = {
+  c2s = { rate = "10mb/s"; };
+  s2sin = { rate = "100mb/s"; };
+}
+
+authentication = "external_insecure"
+archive_expires_after = "1w"
+
+log = {
+  error = "/var/log/prosody/prosody.err";
+  info = "/var/log/prosody/prosody.log";
+  debug = "/var/log/prosody/prosody-debug.log";
+}
+
+certificates = "certs"
+
+component_ports = { 8888 }
+component_interfaces = { "0.0.0.0" }
+
+VirtualHost "zm.is"
+  authentication = "external_insecure"
+  external_auth_command = "/code/utilities/prosody/auth_django.sh"
+  certificate = "/etc/prosody/certs/cert.pem"
+
+Component "jews.zm.is"
+  component_secret = "REepvw+QeX3ZzfmRSbBMKQhyiPd5bFowesnYuiiYbiYy2ZQVXvayxmsB"
+
+Component "share.zm.is" "http_file_share"
+
+http_ports = { 5280 }
+http_interfaces = { "0.0.0.0", "::" }
+http_external_url = "https://share.zm.is/"