http://hg.omfa.de/prosody-hg/ en-us prosody-hg: util/prosodyctl/check.lua history util/prosodyctl/check.lua revision history util.prosodyctl.check: Print expected TLSA records in consistent format http://hg.omfa.de/prosody-hg/log/84a72e9cb610/util/prosodyctl/check.lua
Same as util.dns now.
Question is if this is easy to copy-paste into DNS editors.]]> Kim Alvefur <zash@zash.se> Fri, 12 Jun 2026 23:09:09 +0200 util.prosodyctl.check: Show TLSA records in DNS http://hg.omfa.de/prosody-hg/log/59c50c76860b/util/prosodyctl/check.lua
Doesn't yet check that these match your certificates, but can be
compared to 'check certs']]> Kim Alvefur <zash@zash.se> Fri, 12 Jun 2026 23:08:09 +0200 util.prosodyctl.check: Refactor DNS checks to reduce duplication http://hg.omfa.de/prosody-hg/log/866422587486/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Fri, 12 Jun 2026 16:43:44 +0200 Merge 13.0->trunk http://hg.omfa.de/prosody-hg/log/565debd9c37a/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Fri, 12 Jun 2026 13:05:10 +0100 prosodyctl check: Validate tls_profile and tls_profile_version http://hg.omfa.de/prosody-hg/log/8f34af6a3821/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Fri, 12 Jun 2026 13:04:54 +0100 net.unbound: Enable DNSSEC by default with option for turning off http://hg.omfa.de/prosody-hg/log/2ec517d8d43e/util/prosodyctl/check.lua
You know what they say about opt-in security.

Enabling DNSSEC in libunbound without a way to turn it off would likely
be a problem for those whose DNS resolvers do not support, or outright
block DNSSEC. The merge algorithm already in place here doesn't have a
way to unset something, so instead a simpler boolean setting is
introduced, similar to some existing ones like use_ipv6/4 and use_dane.]]> Kim Alvefur <zash@zash.se> Sun, 07 Jun 2026 20:32:55 +0200 Merge 13.0->trunk http://hg.omfa.de/prosody-hg/log/70b08435e47b/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sun, 01 Mar 2026 22:51:12 +0000 prosodyctl check features: Warn if http file sharing enabled on both host and component http://hg.omfa.de/prosody-hg/log/48ea7a15957e/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sun, 01 Mar 2026 22:50:50 +0000 prosodyctl: Only import "socket" in the root of the module http://hg.omfa.de/prosody-hg/log/0ea2848d7771/util/prosodyctl/check.lua Link Mauve <linkmauve@linkmauve.fr> Fri, 30 Jan 2026 14:44:04 +0100 util.prosodyctl.check: Do not suggest renaming domain to public suffix http://hg.omfa.de/prosody-hg/log/64cd905cb1de/util/prosodyctl/check.lua
Adds optional dependency on https://github.com/daurnimator/lua-psl]]> Kim Alvefur <zash@zash.se> Thu, 22 Jan 2026 17:54:30 +0100 Merge 13.0->trunk http://hg.omfa.de/prosody-hg/log/f5d415d54064/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Tue, 20 Jan 2026 11:13:31 +0000 util.prosodyctl.check: Don't suggest renaming VirtualHost to bare TLD http://hg.omfa.de/prosody-hg/log/76dba6ddf502/util/prosodyctl/check.lua
Suggesting renaming your VirtualHost to "com" if you had "xmpp.com" is
not very helpful. Unfortunately this is non-trivial given second level
hierarchies like .co.uk without using something like the Public Suffix
List or IETF work like draft-ietf-deleg.]]> Kim Alvefur <zash@zash.se> Mon, 19 Jan 2026 12:09:40 +0100 util.prosodyctl.check: Fix #1978 http://hg.omfa.de/prosody-hg/log/d8a30fdfbddd/util/prosodyctl/check.lua
Fixes an error that occurs when modules_enabled is not present in the
global section nor in a Component section, leading to an attempt to
index nil.]]> Kim Alvefur <zash@zash.se> Tue, 13 Jan 2026 22:55:14 +0100 prosodyctl check features: change recommendation from mod_muc_mam to mod_mam http://hg.omfa.de/prosody-hg/log/2afb278326ce/util/prosodyctl/check.lua
This approach is simpler, and we may merge the two modules in the future.]]> Matthew Wild <mwild1@gmail.com> Mon, 12 Jan 2026 18:02:51 +0000 prosodyctl check features: Use modulemanager to calculate modules that will actually be loaded http://hg.omfa.de/prosody-hg/log/9f84b26224e1/util/prosodyctl/check.lua
This will respect options such as modules_disabled, as well as inherited
module calculations for components.]]> Matthew Wild <mwild1@gmail.com> Mon, 12 Jan 2026 18:02:17 +0000 util.prosodyctl.check: Improve reporting of DNS lookup problems http://hg.omfa.de/prosody-hg/log/8078eebf5601/util/prosodyctl/check.lua
Closes #1931]]> Kim Alvefur <zash@zash.se> Mon, 05 May 2025 15:05:53 +0200 prosodyctl check config: add recommendation to switch from admin_telnet to shell http://hg.omfa.de/prosody-hg/log/d01cfbb7fc4f/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Thu, 10 Apr 2025 11:21:13 +0100 prosodyctl check config: List modules which Prosody cannot successfully load http://hg.omfa.de/prosody-hg/log/145b71d1283c/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Wed, 09 Apr 2025 10:54:01 +0100 prosodyctl check certs: Use correct hostname in warning message about HTTPS http://hg.omfa.de/prosody-hg/log/83478fc0806b/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Wed, 02 Apr 2025 17:27:39 +0100 prosodyctl check: Be more robust against invalid disco_items, and show warning http://hg.omfa.de/prosody-hg/log/b6d0f1d79b60/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Mon, 17 Mar 2025 16:48:39 +0000 prosodyctl check features: Report size limit for HTTP upload http://hg.omfa.de/prosody-hg/log/4365f0f03c33/util/prosodyctl/check.lua
This also adds a generic "meta" mechanism where checks can return annotations.]]> Matthew Wild <mwild1@gmail.com> Thu, 13 Mar 2025 11:33:08 +0000 prosodyctl check features: Add descriptions to features http://hg.omfa.de/prosody-hg/log/56fad06904b1/util/prosodyctl/check.lua
Also shuffles mod_pep check to multi-device sync, as I think that's a better
fit.]]> Matthew Wild <mwild1@gmail.com> Thu, 13 Mar 2025 11:32:22 +0000 prosodyctl: check features: stop searching after finding a matching component http://hg.omfa.de/prosody-hg/log/c25ab2f47876/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sat, 22 Feb 2025 09:35:04 +0000 prosodyctl: check features: Fix traceback for components with no recommended modules (thanks Menel, riau) http://hg.omfa.de/prosody-hg/log/704765bfe0a3/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Mon, 17 Feb 2025 11:35:03 +0000 util.prosodyctl.check: Recognise http_upload_external as a file upload service http://hg.omfa.de/prosody-hg/log/d7bf48d31374/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sun, 16 Feb 2025 14:19:16 +0000 util.prosodyctl.check: Fix typo in informational message http://hg.omfa.de/prosody-hg/log/8bf5d07e3796/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sun, 16 Feb 2025 14:17:11 +0000 prosodyctl: check features: check for mod_muc_mam on MUC components http://hg.omfa.de/prosody-hg/log/4f173a44370b/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sun, 16 Feb 2025 13:17:00 +0000 prosodyctl: check: Fix variable name (thanks luacheck) http://hg.omfa.de/prosody-hg/log/f7de36fed53c/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sat, 15 Feb 2025 16:48:11 +0000 prosodyctl: check: Skip DNS checks for known invalid domains (fixes traceback) http://hg.omfa.de/prosody-hg/log/9f8e9aabc00b/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sat, 15 Feb 2025 16:38:50 +0000 prosodyctl: check features: Check for recommended feature availability http://hg.omfa.de/prosody-hg/log/6c59b9072871/util/prosodyctl/check.lua
Inspired by mod_compliance_*, this command will help people (especially those
with older configs, upgrading from previous releases) learn what features
their Prosody configuration may be missing.]]> Matthew Wild <mwild1@gmail.com> Sat, 15 Feb 2025 16:34:16 +0000 util.prosodyctl.check: Sort hosts in iterator for more stable output http://hg.omfa.de/prosody-hg/log/a988867a5567/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sat, 15 Feb 2025 16:31:10 +0000 prosodyctl: check: Fix indentation in warning message http://hg.omfa.de/prosody-hg/log/5f1eb8b14923/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Sat, 15 Feb 2025 16:29:32 +0000 prosodyctl: check: Warn about deprecated mod_posix http://hg.omfa.de/prosody-hg/log/d112eac6a3dc/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Thu, 13 Feb 2025 18:01:15 +0000 Merge 0.12->trunk http://hg.omfa.de/prosody-hg/log/c71feb7686c0/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Fri, 20 Dec 2024 14:22:25 +0000 util.prosodyctl.check: Improve error handling of UDP socket setup (for #1803) http://hg.omfa.de/prosody-hg/log/836efad8483c/util/prosodyctl/check.lua
Not necessarily a fix, but may give us more information about failure cases.]]> Matthew Wild <mwild1@gmail.com> Fri, 20 Dec 2024 14:21:02 +0000 Merge 0.12->trunk http://hg.omfa.de/prosody-hg/log/5d9ec2e55d74/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Wed, 27 Mar 2024 15:39:03 +0000 prosodyctl check: Warn about invalid domain names in the config file http://hg.omfa.de/prosody-hg/log/54a936345aaa/util/prosodyctl/check.lua
This ensures that domain names of virtual hosts and components are valid in
XMPP, and that they are encoded correctly.]]> Matthew Wild <mwild1@gmail.com> Wed, 27 Mar 2024 15:35:15 +0000 util.prosodyctl.check: Disable https cert check if http_external_url set http://hg.omfa.de/prosody-hg/log/f0fc6e7cc4de/util/prosodyctl/check.lua
This would indicate that a reverse proxy is used, which gets to be
responsible for that since it probably holds the actual cert.]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 09:58:56 +0100 util.prosodyctl.check: Check cert for HTTPS if http module enabled http://hg.omfa.de/prosody-hg/log/76b6556c0f67/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 09:50:06 +0100 util.prosodyctl.check: Update conditions for s2s cert checks http://hg.omfa.de/prosody-hg/log/f32faaea3461/util/prosodyctl/check.lua
The 'anonymous_login' setting is deprecated and prosodyctl check config
will tell you to change it to 'authentication = "internal_hashed"', so
we shouldn't need to care about here anymore.]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 09:44:40 +0100 util.prosodyctl.check: Simplify conditions for c2s and s2s cert checks http://hg.omfa.de/prosody-hg/log/6f371066d6e0/util/prosodyctl/check.lua
This code is hard to follow and in need of some refactoring.]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 09:43:54 +0100 util.prosodyctl.check: Try to clarify check for misplaced k=v in modules_enabled (thanks aab and Menel) http://hg.omfa.de/prosody-hg/log/a27a329e93ca/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Sat, 11 Nov 2023 21:33:53 +0100 util.prosodyctl.check: Print DANE TLSA records for certificates http://hg.omfa.de/prosody-hg/log/30b7cd40ee14/util/prosodyctl/check.lua
Not the prosodyctl check dane I wanted to make but a start.]]> Kim Alvefur <zash@zash.se> Fri, 03 Nov 2023 23:08:07 +0100 util.prosodyctl.check: Wrap each check in a function http://hg.omfa.de/prosody-hg/log/84d83f4a190f/util/prosodyctl/check.lua
One small refactor but one huge step in the right direction

Mostly because adding another check would make the line checking for a
valid check exceed the column limit.]]> Kim Alvefur <zash@zash.se> Fri, 03 Nov 2023 22:16:53 +0100 Merge 0.12->trunk http://hg.omfa.de/prosody-hg/log/53708752cc5d/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Wed, 30 Aug 2023 11:09:12 +0200 util.prosodyctl.check: Correct modern replacement for 'disallow_s2s' http://hg.omfa.de/prosody-hg/log/a2ba3f06dcf4/util/prosodyctl/check.lua
The code would have suggested adding to modules_enabled instead of
modules_disabled]]> Kim Alvefur <zash@zash.se> Sun, 27 Aug 2023 15:46:19 +0200 Merge 0.12->trunk http://hg.omfa.de/prosody-hg/log/56decf85db1d/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Mon, 17 Jul 2023 14:57:27 +0200 util.prosodyctl.check: Hint about the 'external_addresses' config option http://hg.omfa.de/prosody-hg/log/22763b30e458/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Mon, 17 Jul 2023 14:56:57 +0200 Merge 0.12->trunk http://hg.omfa.de/prosody-hg/log/e576c6a0d1f8/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Mon, 17 Jul 2023 14:47:39 +0200 util.prosodyctl.check: Validate format of module list options http://hg.omfa.de/prosody-hg/log/b264ea91e930/util/prosodyctl/check.lua
Should detect things like misplaced settings inside modules_enabled]]> Kim Alvefur <zash@zash.se> Mon, 17 Jul 2023 14:45:15 +0200 util.prosodyctl.check: Get some config options via minimal moduleapi #896 http://hg.omfa.de/prosody-hg/log/fcc052ca1652/util/prosodyctl/check.lua
The module API has certain coercion features that are useful.

Fixes traceback reported in #1812 and other duplicates]]> Kim Alvefur <zash@zash.se> Mon, 17 Jul 2023 14:03:13 +0200 Merge 0.12->trunk http://hg.omfa.de/prosody-hg/log/45458ecaacae/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Wed, 31 May 2023 14:20:45 +0200 util.prosodyctl.check: Fix error where hostname can't be turned into A label http://hg.omfa.de/prosody-hg/log/332e95f75dbb/util/prosodyctl/check.lua
Where gethostname or tohostname returns an invalid name, e.g. containing
underscores or something, to_ascii would reject this and return nil,
which triggers an error in the dns lookup.

Reported by prova2 in the chat, for whom tohostname returned a long name
containing underscores.]]> Kim Alvefur <zash@zash.se> Wed, 31 May 2023 14:08:19 +0200 util: Prefix module imports with prosody namespace http://hg.omfa.de/prosody-hg/log/d10957394a3c/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Fri, 17 Mar 2023 16:23:16 +0100 Merge 0.12->trunk http://hg.omfa.de/prosody-hg/log/09b101a3b3e1/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Wed, 22 Feb 2023 22:29:53 +0100 util.prosodyctl.check: Suggest 'http_cors_override' instead of older CORS settings http://hg.omfa.de/prosody-hg/log/4255db0f8e58/util/prosodyctl/check.lua
The cross_domain_* settings were added here prior to http_cors_override
being added back in 17d87fb2312a, so for a time there was no
replacement, but now there is.]]> Kim Alvefur <zash@zash.se> Wed, 22 Feb 2023 22:27:42 +0100 Merge 0.12->trunk http://hg.omfa.de/prosody-hg/log/e609e10966f5/util/prosodyctl/check.lua Kim Alvefur <zash@zash.se> Sat, 14 Jan 2023 14:09:33 +0100 prosodyctl check dns: Check for Direct TLS SRV records even if not configured (fix #1793) http://hg.omfa.de/prosody-hg/log/3edd39c55a8a/util/prosodyctl/check.lua
Existing such records may cause timeouts or errors in clients and
servers trying to connect, despite prosodyctl check saying all is well]]> Kim Alvefur <zash@zash.se> Sat, 14 Jan 2023 05:47:47 +0100 prosodyctl: check turn: More clearly indicate the error is from TURN server http://hg.omfa.de/prosody-hg/log/7b3deafb9162/util/prosodyctl/check.lua Matthew Wild <mwild1@gmail.com> Thu, 06 Oct 2022 11:12:57 +0100 util.prosodyctl.check: Remove now redundant unbound config tweak http://hg.omfa.de/prosody-hg/log/bb5f772b3189/util/prosodyctl/check.lua
This is now done in net.unbound itself

Turning it back on in the config may still cause the problem of entries
there masking the DNS values.]]> Kim Alvefur <zash@zash.se> Thu, 26 May 2022 13:03:58 +0200