dns

Setting up DNS entries

Make sure the following entries are added to your DNS, such that the clients and the other servers may find your XMPP server. Please note the terminal dots after example.org..

example.org.                              A    192.0.2.2
example.org.                              AAAA 2001:db8::2
www.example.org.                          A    192.0.2.2
www.example.org.                          AAAA 2001:db8::2
xmpp.example.org.                         A    192.0.2.3
xmpp.example.org.                         AAAA 2001:db8::3
_xmpp-client._tcp.example.org.            SRV  10 1 5222 xmpp.example.org.
_xmpps-client._tcp.example.org.           SRV  10 1 5223 xmpp.example.org. # Only add when using *ejabberd*
_xmpp-server._tcp.example.org.            SRV  10 1 5269 xmpp.example.org.
_xmpp-server._tcp.conference.example.org. SRV  10 1 5269 xmpp.example.org.
_xmpp-server._tcp.pubsub.example.org.     SRV  10 1 5269 xmpp.example.org.
userdata.example.org.                     CNAME xmpp.example.org.
pubsub.example.org.                       CNAME xmpp.example.org.
conference.example.org.                   CNAME xmpp.example.org.
proxy.example.org.                        CNAME xmpp.example.org. # Only necessary for *Prosody*

If you plan to run everything on the same server, you can set the IP addresses of xmpp.example.org to those of example.org.

SRV records are described here, if you want to learn more.

Of course, today, you might want to enable DNSSEC. A good DNS server provider should support this out of the box, but it's not hard to do it if you run your own DNS server.

Next: Setting up Apache with a Let's Encrypt certificate