[Debian-rtc-admin] [rt.debian.org #8257] Allow debvoip to sudoedit prosody config files on vogler

[Philipp Kern via RT]

Hi,

On 10/19/24 3:33 PM, W. Martin Borgert via RT wrote:
> TTBOMK, full debug log shows "everything". Admin can see all contact and
> all messages, if they are not e2ee. I can check with prosody upstream if
> there is a debug mode, that is less problematic and still helpful for
> our use case. In that case, I suggest, that :debvoip group can only
> switch on and off this specific mode. E.g. by something like "touch
> /etc/prosody/turn-on-debug && systemctl reload prosody" or whatever.

It'd be good if this would not hit the disk.

[...]> I believe, that we should have nginx on vogler on ports 443 and 80.
> It's needed not only for BOSH and HTTP file upload, but it is also a
> very good idea to run xmpps (XMPP over direct TLS) on port 443. Last
> time in a British train, I only could connect to my private Jabber
> server on port 443, but not the Debian server.

Could we also do it with apache? We don't currently run nginx.

> PS: I recently sent a git patch on the DSA mailing list improving the
> group chat function of our server. If you or somebody else could apply
> it, that would be great.

It'd be good if you'd attach it here. Thanks!

Kind regards
Philipp Kern