From 4361eb3a19e21dc21ae0ae2cf62cd8ae20f6c6b4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Tue, 31 Oct 2023 16:46:02 +0100
Subject: [PATCH] ejabberd: fix sqlite and access

---
 clanModules/ejabberd.nix | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/clanModules/ejabberd.nix b/clanModules/ejabberd.nix
index d7197a34c..e2bdf3dae 100644
--- a/clanModules/ejabberd.nix
+++ b/clanModules/ejabberd.nix
@@ -1,9 +1,14 @@
 { config
+, pkgs
 , ...
 }: {
   services.ejabberd = {
     enable = true;
     configFile = "/etc/ejabberd.yml";
+    package = pkgs.ejabberd.override {
+      withSqlite = true;
+      withTools = true;
+    };
   };
 
   environment.etc."ejabberd.yml" = {
@@ -38,28 +43,25 @@
       auth_method: [anonymous]
       anonymous_protocol: login_anon
       acl:
-        local:
-          user_regexp: ""
         loopback:
           ip:
             - 127.0.0.0/8
             - ::1/128
       access_rules:
         local:
-          allow: local
+          allow: loopback
         c2s:
-          deny: blocked
-          allow: all
+          allow: loopback
         s2s:
           - allow
         announce:
-          allow: admin
+          allow: loopback
         configure:
-          allow: admin
+          allow: loopback
         muc_create:
-          allow: all
+          allow: loopback
         pubsub_createnode:
-          allow: local
+          allow: loopback
         trusted_network:
           allow: loopback
       api_permissions:
@@ -73,13 +75,11 @@
             access:
               allow:
                 acl: loopback
-                acl: admin
             oauth:
               scope: "ejabberd:admin"
               access:
                 allow:
                   acl: loopback
-                  acl: admin
           what:
             - "*"
             - "!stop"