prosody (XMPP server) on raspberry pi and expose it via clouflared
zero trust tunnel
reddit / selfhosted

----------------------------------------------------------------------
Environmental-Sell29 · 2023-10-27 08:58

I am trying to setup prosody on my raspberry pi zero and expose it
using cloudflare tunnel. However, when it comes to VirtualHost and ssl
settings, I am not sure what are the details to be provided since
cloudflare tunnel takes care of the ssl certificates and keys. Need
help on it

----------------------------------------------------------------------
upofadown · 2023-10-27 12:40

Just get it working locally without TLS/ssl. You probably want to set
this:

    c2s_require_encryption = false

If you are hoping to talk to people outside your domain you will have
to figure out what to do about server to server communications.

----------------------------------------------------------------------
watchdog_timer · 2023-10-27 12:52

i haven't used prosody, but it appears you can [create your own client
certificate](https://developers.cloudflare.com/ssl/client-
certificates/create-a-client-certificate) using Cloudflare then
[manually install it in prosody](https://prosody.im/doc/certificates#i
nstalling_the_certificate)

----------------------------------------------------------------------
Environmental-Sell29 · 2023-10-29 03:38

got you. Thanks mate. Now I need to figure out how to tunnel this

----------------------------------------------------------------------
Environmental-Sell29 · 2023-10-29 03:43

This would work if I need a certificate signed by CA. I am using
cloudflared tunnel provided by zero trust. And by default the tunnel
has a CA signed certificate for which I don't have access to. Let me
check if [https://developers.cloudflare.com/ssl/client-
certificates/create-a-client-
certificate](https://developers.cloudflare.com/ssl/client-
certificates/create-a-client-certificate) by using this, I can tell
tunnel to use this certificate and configure the same in my local
server