If you want to make sure that XMPP federation works, add your GMail addressĪs a buddy to the account and send yourself a test message.

Connection security: Require encryptionįrom this, I was able to connect to the server without clicking through any.

Password: the following setting in the 'Advanced' tab:.

On the client side, if you use Pidgin, create a new account with the Setting in step 4 to the following: s2s_use_starttls: optional Server, you will unfortunately need to change the s2s_use_starttls Note that if you'd like to be able to talk to contacts via the GMail XMPP To requests after running for a while: 0 4 * * * root /bin/systemctl restart rvice To restart ejabberd once a day to ensure it doesn't stop responding Optionally create a cronjob in /etc/cron.d/restart-ejabberd Iptables -A INPUT -p tcp -dport 5269 -j ACCEPT Restart the ejabberd daemon: systemctl restart rviceĬreate a new user account for yourself: ejabberdctl register me up the following ports on the server's firewall: iptables -A INPUT -p tcp -dport 5222 -j ACCEPT Improve the client-to-server and server-to-server TLS configuration: define_macro:Ĭreate the required dhparams.pem file: openssl dhparam -out /etc/ejabberd/dhparams.pem 2048 Permissions correctly: chown root:ejabberd /etc/ejabberd/ejabberd.pem Set the following in /etc/ejabberd/ejabberd.yml: acl:Ĭopy the SSL certificate into the /etc/ejabberd/ directory and set the 'admin' as the username for the administrative user: apt install ejabberd To solve the Pidgin 'Not authorized' connection problems. Installing ejabberd on Debian is pretty simple and I mostly followed the I wrote a cronjob to renew this certificate automatically using certbot.

Into the file that ejabberd expects: cat /etc/letsencrypt/live//privkey.pem /etc/letsencrypt/live//fullchain.pem > ejabberd.pemĪnd then restart the service: systemctl restart rvice

Once you have the cert, you can merge the private and public keys Then, shutdown your existing webserver if you have one running and requestĪ cert like this: certbot -duplicate certonly -apache -d -d The easiest way to get a certificate is to install certbot: apt install certbot python3-certbot-apache Then I went to get a free TLS certificate for the above. My personal domain is and so I created the following DNS Services, I decided to setup my own XMPP / Jabber server on a server In order to get closer to my goal of reducing my dependence on centralized

Pidgin xmpp tutorial