From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id KPk6IYQOvWUFVQAAe85BDQ:P1 (envelope-from ) for ; Fri, 02 Feb 2024 16:47:16 +0100 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id KPk6IYQOvWUFVQAAe85BDQ (envelope-from ) for ; Fri, 02 Feb 2024 16:47:16 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=msavoritias.me header.s=20210930 header.b=g7ggkRN9; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=msavoritias.me (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1706888836; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:list-id:list-help:list-unsubscribe:list-subscribe: list-post:dkim-signature; bh=EsPfG0UJ2fTG4FPuWPDv8X2YkcG6OVp6x8Lv/WMEBfc=; b=TQGoR/JUWnh6hE9bnue8doNlbM6cdiMh21pJGLp6IOxvpDC0I1HlbVNzAy1ggobPCPmEdI ClIeTwrnDuEMcqczANqfoUS3t8xe0hnVZUP+JzA+g9MLzlmxERzbYz/KA+jBHEgWiT9wMk 7FJLmw2sEYA4ZfNW/q96ZDTCYk/yWfudEUYP/nodqlZBsXv+vFzQKlu156pShKrU/G7uiw dr7YCEhuk2GaiNBvhhfT+sTulIaVO/4MMNoptmagw//NZ8zACTKitkbe8EHpJriKrbIL+K SkVULuk6IwGCkiJ987aSlPbZsOl6daPixio35rWDjAZJAHczzx2M9rzTfSHfQQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=msavoritias.me header.s=20210930 header.b=g7ggkRN9; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=msavoritias.me (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1706888836; a=rsa-sha256; cv=none; b=opfzlGTQgTTKKiA8iABZ5ZHrbISQBhIyRh9+zew+FZy9iwbDb9VXS5ACVk4JO9IbJ7yaKc NkPTKsEfCLevMHipKxHWpGEkgQKveFqiNSXlaYOwZG6hSidYPuYdsqYVfeh8XIu3hbJeqP C5jxGAGB472tNbogSTQImotPZ6x7vw4fUPzaH/wa6k8dGYeROarWJFpR8zcOjl/bfk249h K2Us0ArxefcM9dLl79zahS5ACyrmwFdnLaOY9rDmU5xAfeNFwvWIGkuLY4CsB0zR5EEabq spKpowqDF7htMKkeqtftk0txcwhYVLhpWlrdIEj4bZv4msUWXyUZtNn+tI7CuQ== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 41B8517781 for ; Fri, 2 Feb 2024 16:47:15 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rVvku-0007lt-Nf; Fri, 02 Feb 2024 10:47:04 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rVvki-0007kS-Qv for bug-guix@gnu.org; Fri, 02 Feb 2024 10:46:55 -0500 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1rVvkh-0006W9-KT for bug-guix@gnu.org; Fri, 02 Feb 2024 10:46:51 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1rVvkr-0001mc-Si for bug-guix@gnu.org; Fri, 02 Feb 2024 10:47:01 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#68894: Prosody guix service required fixes. Resent-From: "email@msavoritias.me" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 02 Feb 2024 15:47:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 68894 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 68894@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.17068888146840 (code B ref -1); Fri, 02 Feb 2024 15:47:01 +0000 Received: (at submit) by debbugs.gnu.org; 2 Feb 2024 15:46:54 +0000 Received: from localhost ([127.0.0.1]:45451 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rVvkk-0001mF-9Q for submit@debbugs.gnu.org; Fri, 02 Feb 2024 10:46:54 -0500 Received: from lists.gnu.org ([2001:470:142::17]:38148) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rVvkh-0001m1-Fp for submit@debbugs.gnu.org; Fri, 02 Feb 2024 10:46:52 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rVvkQ-0007gk-Nq for bug-guix@gnu.org; Fri, 02 Feb 2024 10:46:34 -0500 Received: from mail.webarch.email ([81.95.52.48]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rVvkN-0006Rh-Ja for bug-guix@gnu.org; Fri, 02 Feb 2024 10:46:33 -0500 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id BA13C1A8D8A8 for ; Fri, 2 Feb 2024 15:46:18 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msavoritias.me; s=20210930; t=1706888781; h=from:subject:date:message-id:to:mime-version:content-type: content-language; bh=EsPfG0UJ2fTG4FPuWPDv8X2YkcG6OVp6x8Lv/WMEBfc=; b=g7ggkRN9CoKvmhlU/qEMZ8xzHCT+n3bEZfy76Zszlfn4LVJafzSUNhcqgD8bOwKKgapnJt eNZTx6anxLu5jxvjLoiTdNunbPdGIg1+fYLBBAnSx84r0LmSKm+2zD2xe+mMJdKqtH5hUH sykSv8TxPrFyXvcvzqN/0Tw1YzyJthWkhYq3XW1k4bchpt85MopA1OUZSoYwQXJGxP2Esy D8KZCuBP5smEiQKRkyosBbJrwNwJkkowBnbfPsqTsLainNsGv3bY5MksPeTbaoUJJNpi8b 1rhG5i8/stx3c8twtJ8NzPuwrnTKfpn+eIjXEorHb9k9wmIJRnxFD3EuT9PUIA== Content-Type: multipart/alternative; boundary="------------8c4fUGcDEhyc0Rk208H4b5yJ" Message-ID: <41a23fb5-7698-bc69-8c22-80c5433b53cd@fannys.me> Date: Fri, 2 Feb 2024 17:46:11 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.15.0 Content-Language: en-US From: "email@msavoritias.me" X-Last-TLS-Session-Version: TLSv1.3 Received-SPF: pass client-ip=81.95.52.48; envelope-from=email@msavoritias.me; helo=mail.webarch.email X-Spam_score_int: -16 X-Spam_score: -1.7 X-Spam_bar: - X-Spam_report: (-1.7 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: 0.52 X-Migadu-Scanner: mx13.migadu.com X-Spam-Score: 0.52 X-Migadu-Queue-Id: 41B8517781 X-TUID: pyIGY97wcF4R This is a multi-part message in MIME format. --------------8c4fUGcDEhyc0Rk208H4b5yJ Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Tried to write a system declaration that includes a prosody server. This bug aims to collect some bugs that were found and some features that were needed during writing. 1. The opaque-prosody-configuration as used in this example https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua is broken. A workaround for now is adding raw-content as a field inside prosody-configuration. 2. Prosody Includes a plugin installer now https://prosody.im/doc/installing_modules#using-the-installer so the plugin-directory here https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths needs to be changed to wrap the module installer instead. since its easier to do that than manually copying modules. This is for modules that are not part of guix yet. Ideally imo an xmpp package file would be ideal to host any module that are packaged plus all related software. 3. The modules enabled by default is outdated https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled A simple example vcard is deprecated now. also not sure if register should be default now since we have invites. 4. Security should be the default at this point https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f should be turned to true by default. all are already true by default upstream https://prosody.im/doc/s2s#security 5. The internal authentication here https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication |should be internal_hashed as per default. https://prosody.im/doc/authentication it should never be plain.| |6. Also a field for http_file_share is mandatory nowadays. see https://prosody.im/doc/modules/mod_http_file_share| |7. room creation should be local for safety reasons https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation| |nobody allows non local anymore.| I plan to get to do this btw after i am done with the joinjabber server at some point. :) |Regards,| |MSavoritias| --------------8c4fUGcDEhyc0Rk208H4b5yJ Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Tried to write a system declaration that includes a prosody server.

This bug aims to collect some bugs that were found and some features that were needed during writing.


1. The opaque-prosody-configuration as used in this example https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua

is broken. A workaround for now is adding raw-content as a field inside prosody-configuration.


2. Prosody Includes a plugin installer now https://prosody.im/doc/installing_modules#using-the-installer

so the plugin-directory here https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths needs to be changed to wrap the module installer instead. since its easier to do that than manually copying modules.

This is for modules that are not part of guix yet. Ideally imo an xmpp package file would be ideal to host any module that are packaged plus all related software.


3. The modules enabled by default is outdated https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled

A simple example vcard is deprecated now. also not sure if register should be default now since we have invites.


4. Security should be the default at this point

https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f

https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f

https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f

should be turned to true by default. all are already true by default upstream https://prosody.im/doc/s2s#security


5. The internal authentication here https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication

should be internal_hashed as per default. https://prosody.im/doc/authentication it should never be plain.


6. Also a field for http_file_share is mandatory nowadays. see https://prosody.im/doc/modules/mod_http_file_share


7. room creation should be local for safety reasons https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation

nobody allows non local anymore.


I plan to get to do this btw after i am done with the joinjabber server at some point. :)


Regards,

MSavoritias

--------------8c4fUGcDEhyc0Rk208H4b5yJ--