XMPP Service Operators - 2023-02-10

  1. Link Mauve

    moparisthebest, with nginx, how do I redirect ALPN to Prosody while continuing to serve HTTP normally?

  2. Link Mauve

    The example configuration on the wiki seems to assume that nginx will be used exclusively as a proxy, not that it will serve things on its own.

  3. Link Mauve

    jonas’, snj’s stats page lists German and Portugese three times in the table at the bottom of the page, you might want to deduplicate languages there.

  4. jonas’

    Link Mauve, tricky to do

  5. jonas’

    de_DE vs. de_AT for instance, but in some cases, that is actually relevant

  6. Link Mauve

    Is it de vs. de_DE vs. German?

  7. jonas’

    German wouldn't parse and would be rejected

  8. Link Mauve


  9. jonas’

    Link Mauve, problem is I do the GROUP BY on the language tags inside the database, at that point I don't yet know whether the localized names will be equal

  10. jonas’

    I could trim off the part behind the _, but I think that would be a highly contentious choice to do.

  11. moparisthebest

    Link Mauve: I think the wiki example is correct, you can have as many streams and http servers hosted by the same nginx as you want, and it will forward traffic to itself

  12. moparisthebest

    I'm still using sslh

  13. Link Mauve

    moparisthebest, how do you do that, the stream to itself?

  14. moparisthebest

    Link Mauve: like your https will be on a different IP or port, then that's your upstream in that stream config

  15. moparisthebest

    Only the stream config can listen on your public 443

  16. Link Mauve

    Oh, so I have to make all of my existing server sections to some other port, and then set that as an upstream?

  17. Link Mauve

    And then it will open a socket to itself?

  18. moparisthebest


  19. moparisthebest

    You can probably use Unix sockets for that now that I think about it

  20. Link Mauve

    That sounds sub-optimal.

  21. moparisthebest

    Should just be a free splice() call after the connect, I mean, what other way would be possible

  22. Link Mauve

    It could handle the things internally, without yet another fd.

  23. moparisthebest

    Nginx could for https things only I guess

  24. moparisthebest

    But something is going to have to sit in front and multiplex to the others

  25. Link Mauve

    Yeah, that’s exactly what I would want, nginx to handle HTTPS like it is currently doing, and proxy to Prosody for XMPPS stuff.

  26. moparisthebest

    I guess you could ask