diff options
Diffstat (limited to 'content')
| -rw-r--r-- | content/ejabberd.md | 7 | ||||
| -rw-r--r-- | content/nextcloud.md | 1 |
2 files changed, 6 insertions, 2 deletions
diff --git a/content/ejabberd.md b/content/ejabberd.md index 0a7f3a8..0080dba 100644 --- a/content/ejabberd.md +++ b/content/ejabberd.md @@ -70,7 +70,7 @@ Using certbot, this process can be easily automated with these commands: ```sh $DOMAIN=subdomain.example.org -certbot --nginx -d $DOMAIN certonly; mkdir /etc/ejabberd/certs/$DOMAIN +certbot --nginx -d $DOMAIN certonly; mkdir -p /etc/ejabberd/certs/$DOMAIN cp /etc/letsencrypt/live/$DOMAIN/fullchain.pem /etc/ejabberd/certs/$DOMAIN cp /etc/letsencrypt/live/$DOMAIN/privkey.pem /etc/ejabberd/certs/$DOMAIN ``` @@ -78,6 +78,11 @@ cp /etc/letsencrypt/live/$DOMAIN/privkey.pem /etc/ejabberd/certs/$DOMAIN This should be ran with your XMPP hostname **(example.org)** and repeated for all your desired subdomains. +Make sure all the certificates are readable by the `ejabberd` user: +```sh +chown -R ejabberd:ejabberd /etc/ejabberd/certs +``` + To enable the use of all these certificates in ejabberd, the following configuration is necessary: diff --git a/content/nextcloud.md b/content/nextcloud.md index 505aae0..0109e5e 100644 --- a/content/nextcloud.md +++ b/content/nextcloud.md @@ -127,7 +127,6 @@ server { gzip_min_length 256; gzip_proxied expired no-cache no-store private no_last_modified no_etag auth; gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/wasm application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy; - pagespeed off; client_body_buffer_size 512k; add_header Referrer-Policy "no-referrer" always; add_header X-Content-Type-Options "nosniff" always; |