oursource/prosody

docker-prosody

![Docker layers]([***]

该镜像用于部署XMPP（Jabber）服务器，设计简洁且易于链接到LDAP认证后端。

镜像概述

本镜像提供Prosody XMPP服务器的容器化部署方案，支持多种存储驱动和认证方式，帮助用户快速搭建安全可靠的即时通讯服务。

核心功能

• 支持LDAP认证后端集成
• 兼容MySQL存储驱动
• 提供HTTP文件上传功能
• 支持SSL/TLS加密（需配合nginx-proxy和Let's Encrypt）
• 配置简单，易于扩展

使用场景

• 企业内部即时通讯系统搭建
• 个人或团队私有通讯服务部署
• 需要LDAP统一认证的通讯场景

配置说明

获取最新镜像

bash
docker pull oursource/prosody:latest

DNS设置

若使用Bind且自动配置HTTP服务器与www.子域名解析到同一IP，可添加以下DNS记录：

jabber                  IN      A       {{$SERVER_IP}}
jabber                  IN      AAAA    {{$SERVER_IPv6}}
_jabber._tcp            SRV 0 1 5269    jabber.{{$DOMAIN}}.
_xmpp-client._tcp       SRV 0 1 5222    jabber.{{$DOMAIN}}.
_xmpp-server._tcp       SRV 0 1 5269    jabber.{{$DOMAIN}}.
conference              CNAME           jabber.{{$DOMAIN}}.

变量替换说明：

Docker Compose配置示例

以下是包含SSL支持（jwilder nginx-proxy）和MariaDB存储驱动的docker-compose.yml示例：

yaml
version: '2'

services:
  jabber:
    image: oursource/prosody:latest
    hostname: jabber
    domainname: domain.com
    container_name: jabber
    restart: always
    depends_on:
      - prosody_db
      - ldap
      - nginx_proxy
    volumes:
      - ./nginx_proxy/config/certs:/certs
      - ./data/upload:/var/lib/prosody/http_upload
    ports:
      - 5222:5222
      - 5269:5269
    environment:
      - STORRAGE_DRIVER=MySQL
      - STORRAGE_DATABASE=prosody
      - STORRAGE_USER=prosody
      - STORRAGE_PASSWORD=secret
      - STORRAGE_HOST=db
      - SASLAUTHD_LDAP_SERVERS=ldap://ldap/
      - SASLAUTHD_LDAP_BIND_DN=cn=admin,dc=domain,dc=com
      - SASLAUTHD_LDAP_PASSWORD=secret
      - SASLAUTHD_LDAP_SEARCH_BASE=dc=domain,dc=com
      - SASLAUTHD_LDAP_FILTER=(&(mail=%u@%r))
      - HTTP_FILE_UPLOAD_SIZE=***

  db:
    image: mariadb
    hostname: db
    domainname: domain.com
    container_name: db
    restart: always
    volumes:
      - ./jabber/data/db:/var/lib/mysql
    environment:
      - MYSQL_RANDOM_ROOT_PASSWORD=yes
      - MYSQL_PASSWORD=secret
      - MYSQL_DATABASE=prosody
      - MYSQL_USER=prosody

  ldap:
    restart: always
    image: jsmitsnl/docker-openldap-postfix-book:latest
    hostname: ldap
    domainname: domain.com
    container_name: ldap
    volumes:
      - ./ldap/data:/var/lib/ldap
      - ./ldap/config:/etc/ldap/slapd.d
    environment:
      - LDAP_ORGANISATION=Organisation
      - LDAP_DOMAIN=domain.com
      - LDAP_ADMIN_PASSWORD=secret
      - LDAP_LOG_LEVEL=0

  nginx_proxy:
    image: jwilder/nginx-proxy:alpine
    hostname: nginx_proxy
    domainname: domain.com
    container_name: nginx_proxy
    restart: always
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - ./nginx_proxy/config/template/nginx.tmpl:/etc/docker-gen/templates/nginx.tmpl:ro
      - ./nginx_proxy/config/certs:/etc/nginx/certs:ro
      - ./nginx_proxy/config/my_proxy.conf:/etc/nginx/conf.d/my_proxy.conf:ro
      - /etc/nginx/vhost.d
      - /usr/share/nginx/html
    environment:  
      - ENABLE_IPV6=true
    labels:
      - com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy=true
    cap_add:
      - NET_ADMIN

  letsencrypt_companion:
    image: jrcs/letsencrypt-nginx-proxy-companion
    container_name: letsencrypt_companion
    volumes_from:
      - nginx_proxy
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./nginx_proxy/config/certs:/etc/nginx/certs:rw
    restart: always