[global]
admins = ["wt@wthome.ru"]
allow_registration = true
allow_unencrypted_plain_auth = false
archive_expires_after = "never"
c2s_ports = [5222]
c2s_require_encryption = true
consider_bosh_secure = true
consider_websocket_secure = true
data_path = "/var/lib/prosody"
default_archive_policy = true
external_addresses = ["88.204.18.107"]
http_interfaces = ["*"]
http_ports = [5280]
https_interfaces = ["*"]
https_ports = [5281]
interfaces = [
    "0.0.0.0",
    "::",
]
modules_enabled = [
    "roster",
    "saslauth",
    "tls",
    "disco",
    "pep_simple",
    "private",
    "pep",
    "vcard_legacy",
    "carbons",
    "mam",
    "smacks",
    "csi_simple",
    "turn_external",
    "register",
    "blocklist",
    "bookmarks",
    "ping",
    "time",
    "version",
    "uptime",
    "websocket",
    "bosh",
    "admin_shell",
    "cloud_notify",
    "s2s",
    "s2s_auth_certs",
    "seclabels",
    "sasl_ssdp",
    "sasl2",
]
pep_max_items = 10000
push_max_devices = 50
push_max_errors = 32
push_max_hibernation_timeout = 259200
push_notification_important_body = "New message"
push_notification_with_body = true
push_notification_with_sender = true
s2s_ports = [5269]
s2s_require_encryption = true
s2s_secure_auth = true
smacks_hibernation_time = 300
smacks_max_unacked = 100
turn_external_host = "turn.wthome.ru"
turn_external_port = 3478
turn_external_secret = "TEST-ONLY-NOT-A-REAL-SECRET"
turn_external_ttl = 86400

[global.http_cors_override.bosh]
enabled = true
origins = ["https://wthome.ru"]

[global.http_cors_override.websocket]
enabled = true
origins = ["https://wthome.ru"]

[global.limits.c2s]
rate = "100kb/s"

[global.limits.s2sin]
rate = "300kb/s"

[global.log]
error = "*console"
info = "*console"

[global.security_labels]
default_policy = "default"

[[global.security_labels.policies.default.classifications]]
default = true
name = "Unclassified"

[[global.security_labels.policies.default.classifications]]
name = "Confidential"

[[global.security_labels.policies.default.classifications]]
name = "Secret"

[[global.security_labels.policies.default.classifications]]
name = "Top Secret"

[global.vcard_avatar]
sync_to_pep = true
sync_to_vcard = true

[hosts."conference.wthome.ru"]
component = "muc"

[hosts."conference.wthome.ru".options]
load_global_modules = false
mam_muc_archive_expires_after = "1w"
max_history_messages = 100
modules_enabled = ["muc_mam"]
muc_tombstones = true
name = "Conference Rooms"
restrict_room_creation = "local"

[hosts."pubsub.wthome.ru"]
component = "pubsub"

[hosts."pubsub.wthome.ru".options]
load_global_modules = false
name = "PubSub Service"
restrict_node_creation = false

[hosts."upload.wthome.ru"]
component = "http_file_share"

[hosts."upload.wthome.ru".options]
http_file_share_expires_after = "never"
http_file_share_global_quota = 107374182400
http_file_share_size_limit = 10737418240
load_global_modules = false
name = "File Sharing"

[hosts."wthome.ru".options]
authentication = "internal_hashed"
modules_enabled = ["mam"]

[hosts."wthome.ru".options.ssl]
certificate = "/etc/prosody/certs/fullchain.pem"
key = "/etc/prosody/certs/privkey.pem"