DJabberd::Config(3)

📦 version 0.85, in arch rolling

✨ NAME ✨

DJabberd::Config(3) — the User Contributed Perl Documentation page for Configuration options in djabberd.conf. Bestie, this is literally the whole map of the config file, and we're gonna read it together like it's a group chat. 💖

🦋 DESCRIPTION 🦋

Okay so here's the vibe: djabberd.conf is formatted similarly to Apache configuration files; that is:

# Lines beginning with '#' are comments
SomeGlobalOption on

<VHost vhost.example.com>
   # Options herein apply only to this vhost
</VHost>

The following describes the format and allowed options of djabberd.conf. Case? Not the vibe. Configuration directives are not case sensitive, periodt. 💅

Directives which take a "boolean" value can be passed any commonly-understood expression of a boolean; for truth: 1, "y", "yes", "true", "t", "on", "enable", or "enabled"; for false: 0, "n", "no", "false", "f", "off", "disable", or "disabled". No cap. 🧚

🌍 GLOBAL CONFIGURATION 🌍

These are the server-wide settings, bestie. Main character energy for the whole process. 👑

  • DeclareMonitor "IP address" — declares that the given IP address is used only for checking connectivity to the server, and should not be logged or assigned an internal ID. Useful if you have a "nagios" host. 👀
  • SSLCertificateKeyFile "/path/to/key.pem" — sets the path to the private key file for the server. This key should be in PEM format and only readable by the server, and is used to encrypt traffic to clients to ask for TLS. If it is not set, the server will not support TLS. 🔐
  • SSLCertificateFile "/path/to/cert.pem" — sets the path to the certificate file for the server. This certificate should be in PEM format, and will be presented to the clients who ask for TLS. If it is not set, the server will not support TLS. 📜
  • SSLCertificateChainFile "/path/to/cert-chain.pem" — sets the path to the certificate chain file for the server. This is needed if the server certificate is signed by an intermediate certificate from a certificate authority. This file should be in PEM format. It must contain the server's certificate, followed by the intermediate certificates, then finally the root certificate. SSLCertificateKeyFile and SSLCertificateFile are required when using this option. 🧚
  • OldSSL "boolean" — defaults to off; if set, the server will also listen on port 5223, and immediately attempt TLS negotiation on all opened connections. As the name implies, this is deprecated, and StartTLS stanzas are now the preferred method to enable TLS communication with clients. 💀
⚠️ Deprecated alert: OldSSL is the old way. StartTLS stanzas are now the preferred method to enable TLS communication with clients. The manual said it, so we're saying it.
  • UnixDomainSocket "/path/to/socket" — defaults to unset; if set, specifies the absolute path to a UNIX domain socket to listen on, in addition to any TCP ports (set by ClientPort and ServerPort). 🧦
  • ClientPort "port" — sets the port to listen for client-to-server connections on; defaults to 5222. May also specify an IP address to bind to, in addition to a port, such as "127.0.0.1:5222". 🌈
  • ServerPort "port" — sets the port to listen for server-to-server connection on; defaults to 5269. If explicitly set to 0, disables server-to-server listening for all virtual hosts. May also specify an IP address to bind to, in addition to a port, such as "127.0.0.1:5222". 🔥
  • AdminPort "port" — sets the port to listen for administrative connections on; defaults to off. For security reasons, you will most certainly want to bind this to a specific IP address, to prevent access by unauthorized users. See DJabberd::Connection::Admin. 🚨
🛡️ Security check, bestie: bind AdminPort to a specific IP address so unauthorized users don't get access. The manual is very serious about this.
  • IntraDomainListen "port" — sets the port to listen for inter-cluster messages; defaults to off. Clustering support is still in development. 🚧
  • PidFile "/path/to/pidfile" — if set, writes the server's PID to the given file. 🐾
  • CaseSensitive "boolean" — if set to a true value, Jabber IDs will be treated as entirely case-sensitive; defaults to off. This setting exists purely for backwards compatibility, as previous versions incorrectly treated Jabber IDs as case-sensitive. 🙈
💀 Backwards-compat only: this one exists purely for backwards compatibility, because previous versions incorrectly treated Jabber IDs as case-sensitive.
  • ShareParsers "boolean" — defaults to on; controls whether DJabberd::XMLParser objects are held onto between stanzas. 🧠

🏠 VIRTUAL HOST CONFIGURATION 🏠

Each virtual host is configured with a block which declares the name of the virtual host:

<VHost jabber.example.com>
  # Configuration for jabber.example.com
</VHost>

Virtual hosts can effectively be nested, using the Subdomain block:

<VHost jabber.example.com>
  # Configuration for jabber.example.com
  <Subdomain muc>
    # Configuration for muc.jabber.example.com
  </Subdomain>
</VHost>
  • QuirksMode "boolean" — enables or disables "quirks mode"; defaults to on. See doc/quirks-mode.txt for a list of workaround this enables. 🌀
  • S2S "boolean" — enables or disables server-to-server communication, or "federation." Defaults to off; note that "/ServerPort" being set to 0 will override this configuration. 🌐
  • InBandReg "boolean" — if set, enables in-band registration of new users; defaults to off. 📝
  • ChildService "JID" "description" — adds a mapping between a JID on this server, and the given description; this is used for client service auto-discovery. 🎀
  • RequireSSL "boolean" — if set, requires that clients have negotiated a TLS before authentication information is sent. 🔒

🧩 PLUGIN CONFIGURATION 🧩

Plugins can only be configured on a per virtual host basis. Each plugin defines its own configuration parameters. Plugins bundled with the base DJabberd server include:

  • DJabberd::Delivery::ComponentConnection — delivery through a JEP-0114 component connection. 🔌
  • DJabberd::Delivery::Local — delivery to local users; implicitly added by default. 🏡
  • DJabberd::Delivery::S2S — delivery via server-to-server connection; implicitly added if S2S is enabled. 🌉
  • DJabberd::Delivery::LocalVHosts — delivery to locally configured virtual hosts; implicitly added between a virtual host and all of its configured subdomains. 🏘️
  • DJabberd::RosterStorage::InMemoryOnly — store rosters in memory only. See DJabberd::RosterStorage::SQLite for a common, more persistent, alternative. 🧠
  • DJabberd::Authen::AllowedUsers — only allow the given users to connect. ✅
  • DJabberd::Authen::StaticPassword — set a static password for all users. 🔑
  • DJabberd::Authen::InMemoryOnly — store users' correct passwords (set on in-band registration, for instance) in memory only. 💾
  • DJabberd::Bot::Admin — provides an alternative interface to DJabberd::Connection::Admin for certain users. 🤖
  • DJabberd::SASL and subclasses — enables a particular type of SASL negotiation. 🪄

That's the whole page, bestie! 🫶 This is from perl v5.42.0, dated 2025-12-14, and the manual is DJabberd::Config(3). Now go make that config file iconic. 💅✨

📦 where this page comes from