ejabberd: fix sqlite and access

This commit is contained in:
Jörg Thalheim
2023-10-31 16:46:02 +01:00
parent 53b5e989ee
commit 85b45faf5c

View File

@@ -1,9 +1,14 @@
{ config { config
, pkgs
, ... , ...
}: { }: {
services.ejabberd = { services.ejabberd = {
enable = true; enable = true;
configFile = "/etc/ejabberd.yml"; configFile = "/etc/ejabberd.yml";
package = pkgs.ejabberd.override {
withSqlite = true;
withTools = true;
};
}; };
environment.etc."ejabberd.yml" = { environment.etc."ejabberd.yml" = {
@@ -38,28 +43,25 @@
auth_method: [anonymous] auth_method: [anonymous]
anonymous_protocol: login_anon anonymous_protocol: login_anon
acl: acl:
local:
user_regexp: ""
loopback: loopback:
ip: ip:
- 127.0.0.0/8 - 127.0.0.0/8
- ::1/128 - ::1/128
access_rules: access_rules:
local: local:
allow: local allow: loopback
c2s: c2s:
deny: blocked allow: loopback
allow: all
s2s: s2s:
- allow - allow
announce: announce:
allow: admin allow: loopback
configure: configure:
allow: admin allow: loopback
muc_create: muc_create:
allow: all allow: loopback
pubsub_createnode: pubsub_createnode:
allow: local allow: loopback
trusted_network: trusted_network:
allow: loopback allow: loopback
api_permissions: api_permissions:
@@ -73,13 +75,11 @@
access: access:
allow: allow:
acl: loopback acl: loopback
acl: admin
oauth: oauth:
scope: "ejabberd:admin" scope: "ejabberd:admin"
access: access:
allow: allow:
acl: loopback acl: loopback
acl: admin
what: what:
- "*" - "*"
- "!stop" - "!stop"