https://soft.trung.fun/code/prosody/ en-us CHANGES revision history https://soft.trung.fun/code/prosody/log/a8ad0741632d/CHANGES Matthew Wild <mwild1@gmail.com> Thu, 13 Mar 2025 13:11:05 +0000 https://soft.trung.fun/code/prosody/log/df5d454859b3/CHANGES Matthew Wild <mwild1@gmail.com> Thu, 13 Mar 2025 13:10:22 +0000 https://soft.trung.fun/code/prosody/log/11b51779d546/CHANGES Matthew Wild <mwild1@gmail.com> Tue, 11 Mar 2025 18:27:54 +0000 https://soft.trung.fun/code/prosody/log/b50eadfddd57/CHANGES Kim Alvefur <zash@zash.se> Sun, 11 Feb 2024 13:34:13 +0100 https://soft.trung.fun/code/prosody/log/4309c934e813/CHANGES Matthew Wild <mwild1@gmail.com> Sun, 16 Feb 2025 13:29:07 +0000 https://soft.trung.fun/code/prosody/log/569fae28a2f3/CHANGES
Changes from community version:

- Add options to allow explicit control over whether BOSH/WS is advertised
- Always serve XML at /host-meta (no guessing based on Accept), least surprising]]> Matthew Wild <mwild1@gmail.com> Sun, 16 Feb 2025 13:19:05 +0000 https://soft.trung.fun/code/prosody/log/12e0b61830c8/CHANGES Matthew Wild <mwild1@gmail.com> Sat, 15 Feb 2025 16:48:27 +0000 https://soft.trung.fun/code/prosody/log/5f8fe6722c13/CHANGES Matthew Wild <mwild1@gmail.com> Fri, 14 Feb 2025 14:44:47 +0000 https://soft.trung.fun/code/prosody/log/4ac30e46a4fb/CHANGES Matthew Wild <mwild1@gmail.com> Wed, 12 Feb 2025 17:15:49 +0000 https://soft.trung.fun/code/prosody/log/5528bc5ab019/CHANGES Matthew Wild <mwild1@gmail.com> Tue, 11 Feb 2025 14:57:18 +0000 https://soft.trung.fun/code/prosody/log/844e7bf7b48a/CHANGES
This enables use of encrypted databases if LuaDBI or LuaSQLite3 has been
linked against SQLCipher. Using `LD_PRELOAD` may work as well.

Requires SQLCipher >= 4.0.0 due to the use of UPSERT]]> Kim Alvefur <zash@zash.se> Thu, 23 Jan 2025 16:38:56 +0100 https://soft.trung.fun/code/prosody/log/2db7b3b65363/CHANGES
Idea is to enable easily retrieving of secret values from files outside
of the config, e.g. via the method used by systemd credentials.

CREDENTIALS_DIRECTORY is expected to be set by the process manager
invoking Prosody, so being unset and unavailable from prosodyctl is
going to be normal and a warning is reported in that case. Care will
have to be taken to make it clear that prosodyctl check will not work
with such values. An error is thrown if the directory is unavailable
when running under Prosody.]]> Kim Alvefur <zash@zash.se> Thu, 16 Jan 2025 15:21:34 +0100 https://soft.trung.fun/code/prosody/log/ac60c21015c7/CHANGES
Inspired by something MattJ said

Allows retrieving config values from files which are expected to be
relative to the config directory, extending on the ENV_ method of
retrieving config values from outside the config file.

- FileLine retrieves the first line, stripping any trailing newline
- FileContents reads the whole file
- FileLines reads lines into an array]]> Kim Alvefur <zash@zash.se> Thu, 16 Jan 2025 15:05:00 +0100 https://soft.trung.fun/code/prosody/log/dba43269db5e/CHANGES
To support cases where the admin does not have easy access to the
command line to generate a password reset invite for someone who forgot
their password.]]> Kim Alvefur <zash@zash.se> Sun, 20 Oct 2024 12:11:21 +0200 https://soft.trung.fun/code/prosody/log/3abed2ec7ab6/CHANGES Menel <menel@mailbox.de> Mon, 21 Oct 2024 17:15:06 +0200 https://soft.trung.fun/code/prosody/log/3e6d5738ea09/CHANGES
This change has various technical and social benefits. If ownership of a MUC
is really needed, it can be gained using the 'Set affiliation' ad-hoc command
or prosodyctl shell.

Example client incompatibility with the old behaviour:

- https://github.com/monal-im/Monal/issues/1085]]> Matthew Wild <mwild1@gmail.com> Tue, 18 Jun 2024 15:08:30 +0100 https://soft.trung.fun/code/prosody/log/6f840763fc73/CHANGES
Allows creating listening sockets and accepting client connections
before Prosody starts.
This is unlike normal Prosody dynamic resource management, where ports
may added and removed at any time, and the ports defined by the config.

Weird things happen if these are closed (e.g. due to reload) so here we
prevent closing and ensure sockets are reused when opened again.]]> Kim Alvefur <zash@zash.se> Tue, 14 May 2024 17:07:47 +0200 https://soft.trung.fun/code/prosody/log/fdd1438d9ef7/CHANGES
Allows e.g. restricting your vcard4 to only family or similar.

Notes: This does not include roster groups in the configuration form,
so the client will have to get them from the actual roster.]]> Kim Alvefur <zash@zash.se> Sun, 03 Dec 2023 23:19:27 +0100 https://soft.trung.fun/code/prosody/log/afad3b2725bf/CHANGES
This lets Prosody report its lifecycle status to systemd, so it knows
when Prosody has completed its startup, when it's reloading and shutting
down.

Both Type=notify and Type=notify-reload is supported

Example systemd .service configuration snippet:

[Service]
Type=notify]]> Kim Alvefur <zash@zash.se> Thu, 04 Apr 2024 19:00:27 +0200 https://soft.trung.fun/code/prosody/log/581899aef96f/CHANGES
It was mainly used to determine whether to try IPv6 or IPv4 first,
following the rules for this in the RFC.

Now we always try IPv6 and IPv4 at roughly the same time, thus there no
need to carry these rules.]]> Kim Alvefur <zash@zash.se> Thu, 22 Feb 2024 19:46:52 +0100 https://soft.trung.fun/code/prosody/log/f34b33cb1383/CHANGES Kim Alvefur <zash@zash.se> Sun, 08 Aug 2021 18:07:17 +0200 https://soft.trung.fun/code/prosody/log/517a335269ef/CHANGES Kim Alvefur <zash@zash.se> Sat, 09 Dec 2023 16:41:37 +0100 https://soft.trung.fun/code/prosody/log/e8f8a4394187/CHANGES Matthew Wild <mwild1@gmail.com> Fri, 08 Dec 2023 15:46:32 +0000 https://soft.trung.fun/code/prosody/log/f70311588c77/CHANGES
This merges the mod_s2s_smacks_timeout behavior from prosody-modules

This event is fired by mod_smacks when the connection has not responded
to an ack-request for a period of time defaulting to 30 seconds,
indicating that the connection has become stuck or non-responsive.
Closing it prevents routing further messages via this connection and
frees resources. A stuck connection may otherwise remain until for a
time determined by the OS TCP subsystem, which can be quite long.]]> Kim Alvefur <zash@zash.se> Sat, 02 Dec 2023 20:20:05 +0100 https://soft.trung.fun/code/prosody/log/7264c4d16072/CHANGES
Complements the DANE support for outgoing connections included in
net.connect]]> Kim Alvefur <zash@zash.se> Wed, 01 Nov 2023 22:49:56 +0100 https://soft.trung.fun/code/prosody/log/ffd3dadf6247/CHANGES
Requested feature for many modules, notably MAM and file sharing.]]> Kim Alvefur <zash@zash.se> Sun, 22 Oct 2023 18:58:02 +0200 https://soft.trung.fun/code/prosody/log/2a65fc6da156/CHANGES Kim Alvefur <zash@zash.se> Sun, 22 Oct 2023 19:00:24 +0200 https://soft.trung.fun/code/prosody/log/9097149923ae/CHANGES
Behavior change: It becomes up to the authorization module whether to
allow requests. The default, mod_authz_internal, will allow users on the
*parent* host only, breaking use by some components.

Remaining question is whether to deprecate the `http_file_share_access`
setting or leave as a way to complement/bypass access control?]]> Kim Alvefur <zash@zash.se> Sat, 16 Sep 2023 14:23:08 +0200 https://soft.trung.fun/code/prosody/log/4d4f9e42bcf8/CHANGES
Many options in Prosody that are treated as numbers don't make sense as
floats, e.g. sizes and limits measured in bytes.

Simplified implementation based on an earlier attempt dating back to 2020]]> Kim Alvefur <zash@zash.se> Mon, 17 Jul 2023 00:09:41 +0200 https://soft.trung.fun/code/prosody/log/c9ef35fab0b1/CHANGES
E.g. for use in mod_mam and others that take an amount of time before
some (usually cleanup) action is taken.]]> Kim Alvefur <zash@zash.se> Sun, 16 Jul 2023 19:49:12 +0200 https://soft.trung.fun/code/prosody/log/aa6c2692a4be/CHANGES Kim Alvefur <zash@zash.se> Tue, 05 Oct 2021 15:36:38 +0200 https://soft.trung.fun/code/prosody/log/65fb0d7a2312/CHANGES
For when a setting has a few fixed values it can take]]> Kim Alvefur <zash@zash.se> Sat, 16 Jan 2021 20:40:14 +0100 https://soft.trung.fun/code/prosody/log/36b7bdafc993/CHANGES Kim Alvefur <zash@zash.se> Wed, 12 Jul 2023 22:50:24 +0200 https://soft.trung.fun/code/prosody/log/96df571b5941/CHANGES
Specifically the index and more efficient delete.

These are however still in need of testing.]]> Kim Alvefur <zash@zash.se> Wed, 12 Jul 2023 22:48:10 +0200 https://soft.trung.fun/code/prosody/log/f45a29b32f7a/CHANGES
Supporting both methods at the same time may open to spoofing attacks,
whereby a client sends a Forwarded header that is not stripped by a
reverse proxy, leading Prosody to use that instead of the X-Forwarded-*
headers actually sent by the proxy.

By only supporting one at a time, it can be configured to match what the
proxy uses.

Disabled by default since implementations are sparse and X-Forwarded-*
are everywhere.]]> Kim Alvefur <zash@zash.se> Sat, 03 Jun 2023 21:53:20 +0200 https://soft.trung.fun/code/prosody/log/d043834f15d2/CHANGES
Prefer over X-Forwarded-* since it has an actual specification.

Main practical difference is that Forwarded may carry more properties
than only the IP address since it is a structured header.

Since we parse it into an array, it is easier to do the logical thing
and iterate backwards trough proxies until an untrusted one is
encountered. Compare the handling of X-Forwarded-For.

The 'secure' field now accounts for the full chain of proxies, which
must be secure all the way to be considered secure.]]> Kim Alvefur <zash@zash.se> Sat, 03 Jun 2023 17:10:04 +0200 https://soft.trung.fun/code/prosody/log/088d278c75b5/CHANGES Kim Alvefur <zash@zash.se> Fri, 17 Mar 2023 19:38:39 +0100 https://soft.trung.fun/code/prosody/log/640476114eb6/CHANGES Matthew Wild <mwild1@gmail.com> Tue, 21 Mar 2023 18:59:19 +0000 https://soft.trung.fun/code/prosody/log/ce508097b2c8/CHANGES Kim Alvefur <zash@zash.se> Thu, 23 Feb 2023 18:11:15 +0100 https://soft.trung.fun/code/prosody/log/54aea2622459/CHANGES
Easier than going trough muc:room():each_affiliation() since you have to
do fiddly things to reach the print() function.]]> Kim Alvefur <zash@zash.se> Sun, 29 Jan 2023 17:53:21 +0100 https://soft.trung.fun/code/prosody/log/e6324117f124/CHANGES
Easier than going trough muc:room():each_occupant() since you have to do
fiddly things to reach the print() function.]]> Kim Alvefur <zash@zash.se> Sun, 29 Jan 2023 17:41:08 +0100 https://soft.trung.fun/code/prosody/log/1638991caed2/CHANGES Kim Alvefur <zash@zash.se> Thu, 19 Jan 2023 16:56:12 +0100 https://soft.trung.fun/code/prosody/log/1dd468c63a3d/CHANGES
Tiny performance improvement for new users by skipping this check. Most
servers should have gone trough the migration for all active users long
ago.

As a suitable first step of phasing out this code, we make it possible
to disable it first. Later it can be disabled by default, before finally
the code is deleted.]]> Kim Alvefur <zash@zash.se> Mon, 17 Oct 2022 15:20:06 +0200 https://soft.trung.fun/code/prosody/log/447aef5e942c/CHANGES Matthew Wild <mwild1@gmail.com> Thu, 29 Sep 2022 12:57:05 +0100 https://soft.trung.fun/code/prosody/log/2d330edf8bf2/CHANGES Matthew Wild <mwild1@gmail.com> Mon, 22 Aug 2022 13:03:10 +0100 https://soft.trung.fun/code/prosody/log/f928cb5c5d04/CHANGES
Deprecated even before Prosody even started, obsolete for over a decade.]]> Kim Alvefur <zash@zash.se> Mon, 15 Aug 2022 16:35:14 +0200 https://soft.trung.fun/code/prosody/log/4c1d3f817063/CHANGES
Lua since 5.3 raises a fuss when time functions are handed a number with
a fractional part and the underlying C functions are all based on
integer seconds without support for more precision.]]> Kim Alvefur <zash@zash.se> Sun, 14 Aug 2022 16:57:31 +0200 https://soft.trung.fun/code/prosody/log/29685403be32/CHANGES
Brings back SCRAM-SHA-*-PLUS from its hiatus brought on by the earlier
channel binding method being undefined for TLS 1.3, and the increasing
deployment of TLS 1.3.

See 1bfd238e05ad and #1542

Requires future version of LuaSec, once support for this key material
export method is merged.

See https://github.com/brunoos/luasec/pull/187]]> Kim Alvefur <zash@zash.se> Wed, 01 Jun 2022 15:06:59 +0200 https://soft.trung.fun/code/prosody/log/f888c84b2284/CHANGES Kim Alvefur <zash@zash.se> Tue, 05 Jul 2022 14:59:47 +0200 https://soft.trung.fun/code/prosody/log/97af41d580f7/CHANGES
This is useful when there's more than one channel binding in
circulation, since perhaps there will be varying support for them.]]> Kim Alvefur <zash@zash.se> Sun, 06 Dec 2020 22:04:43 +0100 https://soft.trung.fun/code/prosody/log/76c1725f4467/CHANGES
This is a Linux(?) socket option that delays the accept signal until
there is data available to read. E.g. with HTTP this might mean that a
whole request can be handled without going back trough another turn of
the main loop, and an initial client <stream> can be responded to.

This may have effects on latency and resource use, as the server does
not need to allocate resources until really needed.]]> Kim Alvefur <zash@zash.se> Sun, 15 May 2022 22:41:17 +0200 https://soft.trung.fun/code/prosody/log/b7f07585ec4c/CHANGES
Requires a patch to LuaSocket adding this socket option,
https://github.com/lunarmodules/luasocket/pull/378

sysctl tweaks
net.ipv4.tcp_fastopen=3
net.ipv4.tcp_fastopen_blackhole_timeout_sec = 0
net.ipv4.tcp_fastopen_key=$(</proc/sys/kernel/random/uuid)

Disabled by default since it an advanced performance tweak unlikely to
be needed by most servers.]]> Kim Alvefur <zash@zash.se> Thu, 08 Jul 2021 12:29:50 +0200 https://soft.trung.fun/code/prosody/log/8e4a5cb2d199/CHANGES Matthew Wild <mwild1@gmail.com> Sat, 19 Mar 2022 11:47:52 +0000 https://soft.trung.fun/code/prosody/log/b78b8689173a/CHANGES Matthew Wild <mwild1@gmail.com> Sat, 19 Mar 2022 11:41:05 +0000 https://soft.trung.fun/code/prosody/log/61d221efe186/CHANGES Matthew Wild <mwild1@gmail.com> Sat, 05 Mar 2022 14:46:57 +0000 https://soft.trung.fun/code/prosody/log/0fd58f54d653/CHANGES Matthew Wild <mwild1@gmail.com> Fri, 04 Mar 2022 16:33:41 +0000 https://soft.trung.fun/code/prosody/log/ed8a4f8dfd27/CHANGES
The default config was updated in this way long ago, but if no option was
present in the config, Prosody would load internal_plain.

This change can result in changes (for the better) for people using very old
configuration files lacking an 'authentication' setting.]]> Matthew Wild <mwild1@gmail.com> Thu, 10 Feb 2022 19:54:14 +0000 https://soft.trung.fun/code/prosody/log/38b5b05407be/CHANGES
These options have been specified (and enabled) in the default config file for
a long time. However if unspecified in the config, they were not enabled. Now
they are.

This may result in a change of behaviour for people using very old config
files that lack the require_encryption options. But that's what we want.]]> Kim Alvefur <zash@zash.se> Sat, 25 Dec 2021 16:23:40 +0100 https://soft.trung.fun/code/prosody/log/6bb2f660f689/CHANGES
Might be better than select(), more portable than epoll.]]> Kim Alvefur <zash@zash.se> Wed, 23 Feb 2022 20:31:03 +0100 https://soft.trung.fun/code/prosody/log/fa79db7e0a4d/CHANGES Kim Alvefur <zash@zash.se> Fri, 18 Feb 2022 23:20:24 +0100