Commit Graph

214 Commits

Author SHA1 Message Date
Matthew Wild 457096a13d mod_snikket_restricted_users: Don't isolate users with no roles
The code was originally written to fail safe in the event of failure, hence
the 'if roles and ...'. However a user with no roles (which is normal for a
normal user, especially on upgrade) can return nil.

Failure is signified by 'false', so now we explicitly catch this and return
early without bypassing isolation. Users with no roles (nil) or with roles
but not prosody:restricted bypass isolation.
2021-11-10 17:27:09 +00:00
Matthew Wild f85250461c CHANGELOG: Add unreleased changes 2021-11-10 14:41:44 +00:00
Matthew Wild 631c3acc99
Merge pull request #72 from snikket-im/restricted-users
Restrictions for restricted users
2021-11-09 16:21:39 +00:00
Matthew Wild 8d16897cff
Merge pull request #73 from snikket-im/fix-uploads-allow-for-gcm-tag
prosody: Add 16 bytes to upload limit to allow for appended GCM tag
2021-11-09 16:17:50 +00:00
Matthew Wild ca242ce8a4 prosody: Add 16 bytes to upload limit to allow for appended GCM tag (XEP-0454) 2021-11-09 14:25:56 +00:00
Matthew Wild a5084a289e mod_snikket_restricted_users: Add some explanatory comments 2021-11-09 12:28:50 +00:00
Matthew Wild 40daaa883b prosody: Disable user invitations for restricted users
Note that this currently has no effect, because user and contact invitations
are disabled globally for non-admins.
2021-11-09 12:01:59 +00:00
Matthew Wild 263d5cf286 prosody: Bump to trunk build 1535 + prosody-modules 8bd36bba2292 2021-11-09 11:51:16 +00:00
Matthew Wild d47a6ddbc0 mod_snikket_restricted_users: Use event.actor, which is preferred and always present 2021-11-09 11:23:49 +00:00
Matthew Wild 2f997d50b5 prosody: Enable mod_snikket_restricted_users on MUC host to enforce channel creation 2021-11-09 11:23:19 +00:00
Matthew Wild 0294b0e7e0 prosody: Prevent restricted users from creating public channels (#37) 2021-11-08 16:13:07 +00:00
Matthew Wild 5dddfeb876 prosody: Prevent federation for users with prosody:restricted role (#37) 2021-11-08 12:51:14 +00:00
Matthew Wild 00ad72bcf1 prosody: add symlink for mod_cloud_notify_extensions 2021-11-02 12:52:51 +00:00
Matthew Wild 1fe4571ab4 mod_snikket_ios_preserve_push: Handle case where user has no push registrations stored 2021-11-01 10:16:08 +00:00
Matthew Wild e125e70e3e docs: Fix missing quote in command 2021-10-20 20:49:09 +01:00
Matthew Wild 94a279a277 docs: Fix infoboxes in the quickstart to be mkdocs-compatible 2021-10-20 14:20:20 +01:00
Matthew Wild 609183c305 Makefile: Some fixes for the docs build process 2021-10-20 14:03:36 +01:00
Matthew Wild 6160d259e6 docs: Add troubleshooting guide 2021-10-20 14:03:08 +01:00
Matthew Wild dae151c7c9 prosody: Add new module to load push registration for new sessions 2021-10-18 14:17:20 +01:00
Matthew Wild ff38924c47
Merge pull request #71 from Zash/repo-filename
Specify a filename for repository
2021-10-18 13:52:15 +01:00
Matthew Wild adb1fb92ae prosody: Bump prosody-modules for cloud_notify improvements 2021-10-18 13:51:55 +01:00
Matthew Wild 83c757c786 prosody: Add module to expose stable client id across sessions 2021-10-18 13:50:36 +01:00
Kim Alvefur 30e05e8754 Specify a filename for repository
So that it stays the same even if the URL is changed.
2021-10-18 14:15:32 +02:00
Matthew Wild deddef38f2 prosody: Use new cloud_notify_extensions meta-module 2021-10-16 21:23:05 +01:00
Matthew Wild f6cf8f2645 prosody: Add mod_muc_offline_delivery for group notifications on iOS 2021-10-16 21:23:05 +01:00
Matthew Wild 7f94dd21bc Update prosody + prosody-modules 2021-10-16 21:23:05 +01:00
Matthew Wild 0ce5d3acf5
Merge pull request #70 from snikket-im/http-upload-limits
New HTTP upload limits and quota
2021-10-14 14:52:17 +01:00
Matthew Wild c02b8b7f3f docs/advanced/config: document new SNIKKET_UPLOAD_STORAGE_GB option 2021-10-14 14:50:22 +01:00
Matthew Wild 88b61461cc prosody: more consistent environment variable import 2021-10-14 14:35:42 +01:00
Matthew Wild 03f0bb2bd9 prosody: Allow configuration of global upload storage quota 2021-10-14 14:16:04 +01:00
Matthew Wild 6852c37111 prosody: Bump per-upload limit from 16MB to 100MB 2021-10-14 14:14:48 +01:00
Matthew Wild 301ee238be
Merge pull request #68 from horazont/feature/upload-size-config-name-fix
Fix incorrect config option
2021-10-06 17:22:31 +01:00
Jonas Schäfer dabfaa2132 Fix incorrect config option
Both the docs [1] and the code [2] of mod_http_file_share agree that it
should be `http_file_share_size_limit`, not
`http_file_share_file_size_limit`.

   [1]: https://prosody.im/doc/modules/mod_http_file_share#larger-files
   [2]: https://hg.prosody.im/trunk/file/default/plugins/mod_http_file_share.lua#l35
2021-10-06 17:43:30 +02:00
Matthew Wild 29ae464a47
Merge pull request #65 from horazont/feature/docs-advanced-config
Add documentation for advanced config options
2021-10-03 16:45:15 +01:00
Jonas Schäfer 78946c32fd Add documentation for advanced config options
Fixes #38.
2021-10-03 17:38:29 +02:00
Matthew Wild 78b3d4e7e4 ansible: Update Prosody and prosody-modules
Specifically for cloud_notify and mod_message fixes to support MUC push
notifications.
2021-09-26 11:56:59 +01:00
Matthew Wild 384fdf3454
Merge pull request #62 from distefam/patch-1
Add instructions for configuring firewall via UFW
2021-09-09 20:53:17 +01:00
Michael DiStefano 103876e0fd
Add instructions for configuring firewall via UFW 2021-09-09 14:01:08 -04:00
Matthew Wild bd10b2a861 Update luaunbound source URL while code.zash.se is offline 2021-08-27 07:49:37 +01:00
Matthew Wild 2c3ca07ee0 Add and enable mod_spam_reporting/mod_watch_spam_reports 2021-08-26 19:42:26 +01:00
Matthew Wild d0149e52df
Merge pull request #49 from Zash/mod_http_file_share
Switch to mod_http_file_share
2021-08-06 15:59:28 +01:00
Matthew Wild 3152aa8ba2
Merge pull request #45 from horazont/feature/turnserver-port-range
Make TURN server port range configurable
2021-08-06 12:22:28 +01:00
Jonas Schäfer 5b8d22a2f1 Make TURN server port range configurable
Fixes #32; see there and in the text for details and rationale.
2021-08-02 17:04:32 +02:00
Kim Alvefur 37f2af4acd Switch to mod_http_file_share
More future-proof, allowing for larger uploads.
2021-07-31 21:05:09 +02:00
Matthew Wild ecf3dede57
Merge pull request #54 from Zash/fix_qrencode
Fix create-invite --qr
2021-07-31 19:57:54 +01:00
Kim Alvefur 89b8c7dfc7 create-invite: Fix that --qr was also passed to prosodyctl 2021-07-31 20:54:31 +02:00
Kim Alvefur a163990ef8 ansible/scripts: Install qrencode
Used by create-invite when called with --qr
2021-07-31 20:54:31 +02:00
Matthew Wild cec33debd3
Merge pull request #52 from Zash/fix_apt_cruft2
Remove some cruft
2021-07-31 17:48:00 +01:00
Matthew Wild c32e9c4d26
Merge branch 'master' into fix_apt_cruft2 2021-07-31 14:27:28 +01:00
Matthew Wild 94d0113a2e
Merge pull request #51 from Zash/ansiblepy3
Switch Ansible to Python 3, remove Python 2
2021-07-31 14:23:53 +01:00