Received: (at submit) by debbugs.gnu.org; 2 Feb 2024 15:46:54 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Feb 02 10:46:54 2024
Received: from localhost ([127.0.0.1]:45451 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
id 1rVvkk-0001mF-9Q
for submit <at> debbugs.gnu.org; Fri, 02 Feb 2024 10:46:54 -0500
Received: from lists.gnu.org ([2001:470:142::17]:38148)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <email@HIDDEN>) id 1rVvkh-0001m1-Fp
for submit <at> debbugs.gnu.org; Fri, 02 Feb 2024 10:46:52 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from <email@HIDDEN>)
id 1rVvkQ-0007gk-Nq
for bug-guix@HIDDEN; Fri, 02 Feb 2024 10:46:34 -0500
Received: from mail.webarch.email ([81.95.52.48])
by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from <email@HIDDEN>)
id 1rVvkN-0006Rh-Ja
for bug-guix@HIDDEN; Fri, 02 Feb 2024 10:46:33 -0500
Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon)
with ESMTPSA id BA13C1A8D8A8
for <bug-guix@HIDDEN>; Fri, 2 Feb 2024 15:46:18 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msavoritias.me;
s=20210930; t=1706888781;
h=from:subject:date:message-id:to:mime-version:content-type: content-language;
bh=EsPfG0UJ2fTG4FPuWPDv8X2YkcG6OVp6x8Lv/WMEBfc=;
b=g7ggkRN9CoKvmhlU/qEMZ8xzHCT+n3bEZfy76Zszlfn4LVJafzSUNhcqgD8bOwKKgapnJt
eNZTx6anxLu5jxvjLoiTdNunbPdGIg1+fYLBBAnSx84r0LmSKm+2zD2xe+mMJdKqtH5hUH
sykSv8TxPrFyXvcvzqN/0Tw1YzyJthWkhYq3XW1k4bchpt85MopA1OUZSoYwQXJGxP2Esy
D8KZCuBP5smEiQKRkyosBbJrwNwJkkowBnbfPsqTsLainNsGv3bY5MksPeTbaoUJJNpi8b
1rhG5i8/stx3c8twtJ8NzPuwrnTKfpn+eIjXEorHb9k9wmIJRnxFD3EuT9PUIA==
Content-Type: multipart/alternative;
boundary="------------8c4fUGcDEhyc0Rk208H4b5yJ"
Message-ID: <41a23fb5-7698-bc69-8c22-80c5433b53cd@HIDDEN>
Date: Fri, 2 Feb 2024 17:46:11 +0200
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
Thunderbird/102.15.0
Content-Language: en-US
To: bug-guix@HIDDEN
From: "email@HIDDEN" <email@HIDDEN>
Subject: Prosody guix service required fixes.
X-Last-TLS-Session-Version: TLSv1.3
Received-SPF: pass client-ip=81.95.52.48; envelope-from=email@HIDDEN;
helo=mail.webarch.email
X-Spam_score_int: -16
X-Spam_score: -1.7
X-Spam_bar: -
X-Spam_report: (-1.7 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1,
DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001,
T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)
This is a multi-part message in MIME format.
--------------8c4fUGcDEhyc0Rk208H4b5yJ
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Tried to write a system declaration that includes a prosody server.
This bug aims to collect some bugs that were found and some features
that were needed during writing.
1. The opaque-prosody-configuration as used in this example
https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua
is broken. A workaround for now is adding raw-content as a field inside
prosody-configuration.
2. Prosody Includes a plugin installer now
https://prosody.im/doc/installing_modules#using-the-installer
so the plugin-directory here
https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths
needs to be changed to wrap the module installer instead. since its
easier to do that than manually copying modules.
This is for modules that are not part of guix yet. Ideally imo an xmpp
package file would be ideal to host any module that are packaged plus
all related software.
3. The modules enabled by default is outdated
https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled
A simple example vcard is deprecated now. also not sure if register
should be default now since we have invites.
4. Security should be the default at this point
https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f
https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f
https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f
should be turned to true by default. all are already true by default
upstream https://prosody.im/doc/s2s#security
5. The internal authentication here
https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication
|should be internal_hashed as per default.
https://prosody.im/doc/authentication it should never be plain.|
|6. Also a field for http_file_share is mandatory nowadays. see
https://prosody.im/doc/modules/mod_http_file_share|
|7. room creation should be local for safety reasons
https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation|
|nobody allows non local anymore.|
I plan to get to do this btw after i am done with the joinjabber server
at some point. :)
|Regards,|
|MSavoritias|
--------------8c4fUGcDEhyc0Rk208H4b5yJ
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Tried to write a system declaration that includes a prosody
server.</p>
<p>This bug aims to collect some bugs that were found and some
features that were needed during writing.</p>
<p><br>
</p>
<p>1. The <span class="syntax-paren0"><span class="syntax-symbol"><span
class="syntax-paren1"><span class="syntax-symbol"><span
class="syntax-symbol">opaque-prosody-configuration as
used in this example </span></span></span></span></span><a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua">https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua</a></p>
<p>is broken. A workaround for now is adding raw-content as a field
inside prosody-configuration.</p>
<p><br>
</p>
<p>2. Prosody Includes a plugin installer now
<a class="moz-txt-link-freetext" href="https://prosody.im/doc/installing_modules#using-the-installer">https://prosody.im/doc/installing_modules#using-the-installer</a></p>
<p>so the plugin-directory here
<a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths">https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths</a>
needs to be changed to wrap the module installer instead. since
its easier to do that than manually copying modules.</p>
<p>This is for modules that are not part of guix yet. Ideally imo an
xmpp package file would be ideal to host any module that are
packaged plus all related software.</p>
<p><br>
</p>
<p>3. The modules enabled by default is outdated
<a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled">https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled</a></p>
<p>A simple example vcard is deprecated now. also not sure if
register should be default now since we have invites.</p>
<p><br>
</p>
<p>4. Security should be the default at this point <br>
</p>
<p><a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f">https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f</a></p>
<p><a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f">https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f</a></p>
<p><a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f">https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f</a></p>
<p>should be turned to true by default. all are already true by
default upstream <a class="moz-txt-link-freetext" href="https://prosody.im/doc/s2s#security">https://prosody.im/doc/s2s#security</a></p>
<p><br>
</p>
<p>5. The internal authentication here
<a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication">https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication</a></p>
<p><code><font face="DejaVu Sans">should be internal_hashed as per
default. <a class="moz-txt-link-freetext" href="https://prosody.im/doc/authentication">https://prosody.im/doc/authentication</a> it should never
be plain.</font></code></p>
<p><br>
</p>
<p><code><font face="DejaVu Sans">6. Also a field for
http_file_share is mandatory nowadays. see
<a class="moz-txt-link-freetext" href="https://prosody.im/doc/modules/mod_http_file_share">https://prosody.im/doc/modules/mod_http_file_share</a></font></code></p>
<p><br>
</p>
<p><code><font face="DejaVu Sans">7. room creation should be local
for safety reasons
<a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation">https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation</a></font></code></p>
<p><code><font face="DejaVu Sans">nobody allows non local anymore.</font></code></p>
<p><br>
</p>
<p>I plan to get to do this btw after i am done with the joinjabber
server at some point. :)<br>
</p>
<p><br>
</p>
<p><code><font face="DejaVu Sans">Regards,</font></code></p>
<p><code><font face="DejaVu Sans">MSavoritias</font></code><br>
</p>
</body>
</html>
--------------8c4fUGcDEhyc0Rk208H4b5yJ--
"email@HIDDEN" <email@HIDDEN>:bug-guix@HIDDEN.
Full text available.bug-guix@HIDDEN:bug#68894; Package guix.
Full text available.
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.