mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-04 05:37:39 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

util.prosodyctl: Warn about enabled public registration in 'check config'

Browse source
This commit is contained in:
Matthew Wild 2022-03-02 15:22:12 +00:00
parent af95bb77e6
commit 0fe2f4a527
1 changed files with 28 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

28
util/prosodyctl/check.lua
View file

@ -403,6 +403,34 @@ local function check(arg)
ok = false;
end
do
local global_modules = set.new(config["*"].modules_enabled);
local registration_enabled_hosts = {};
for host in enabled_hosts() do
local host_modules = set.new(config[host].modules_enabled) + global_modules;
local allow_registration = config[host].allow_registration;
local mod_register = host_modules:contains("register");
local mod_register_ibr = host_modules:contains("register_ibr");
local mod_invites_register = host_modules:contains("invites_register");
local registration_invite_only = config[host].registration_invite_only;
local is_vhost = not config[host].component_module;
if is_vhost and (mod_register_ibr or (mod_register and allow_registration))
and not (mod_invites_register and registration_invite_only) then
table.insert(registration_enabled_hosts, host);
end
end
if #registration_enabled_hosts > 0 then
table.sort(registration_enabled_hosts);
print("");
print(" Public registration is enabled on:");
print(" "..table.concat(registration_enabled_hosts, ", "));
print("");
print(" If this is intentional, review our guidelines on running a public server");
print(" at https://prosody.im/doc/public_servers - otherwise, consider switching to");
print(" invite-based registration, which is more secure.");
end
end
print("Done.\n");
end
if not what or what == "dns" then