How to Setup Your Own XMPP Server

In this video I show you how to setup XMPP on your own server.
₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿
Monero
45F2bNHVcRzXVBsvZ5giyvKGAgm6LFhMsjUUVPTEtdgJJ5SNyxzSNUmFSBR5qCCWLpjiUjYMkmZoX9b3cChNjvxR7kvh436
Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV
Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079
Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF
Dash
Xh9PXPEy5RoLJgFDGYCDjrbXdjshMaYerz
Zcash
t1aWtU5SBpxuUWBSwDKy4gTkT2T1ZwtFvrr
Chainlink
0x0f7f21D267d2C9dbae17fd8c20012eFEA3678F14
Bitcoin Cash
qz2st00dtu9e79zrq5wshsgaxsjw299n7c69th8ryp
Etherum Classic
0xeA641e59913960f578ad39A6B4d02051A5556BfC
USD Coin
0x0B045f743A693b225630862a3464B52fefE79FdB
Subscribe to my KZbin channel goo.gl/9U10Wz
and be sure to click that notification bell so you know when new videos are released.

[@biasedriot3603]

XMPP is definitely less bloated than my Smoke Signals setup.

[@ChrisJones-rd4wb]

XMPP protocol is really really bloated

[@biasedriot3603]

@@ChrisJones-rd4wb Can't speak of the protocol but I was referring to the application itself (especially Prosody). Compared to some other thing you can self-host like Matrix or Talagram it's night and day.

[@zvezdan956]

@@ChrisJones-rd4wb bloat is only bad when it hinders

[@ChrisJones-rd4wb]

@@zvezdan956 Yes, and it hinders me from making a decent extensible client.

[@just-mees]

Yeah! Running smoke signals on my pcs just made it too hot :\

[@5800X3D]

Man the thumbnail game is on fire

[@doooofus]

0:00 to 0:02 is LITERALLY me when I catch glowies lackin'

[@VioletPrism]

this is why I clicked top tier

[@tomebundalevski1872]

pepe is straight up breaking a glowie buck lmao

[@hughhefner4774]

Yooo fr!

[@thecashewtrader3328]

@Rlaziken UwU

[@awndolznmowdlzkwndznwua]

Finally! Thanks for making privacy more accesible!

[@fortnitegamer-ph5jg]

балгариа

[@ronanclark2129]

Bulgaria

[@porcupinepunch6893]

Болгария

[@astemet]

IRC replacement

[@userhandle3378]

Mental outlaw is legit the truth... I read two chapters on fuzzing and was like, wtf, less than two mins in Outlaw showed me the light. Thanks man, doing gods work out here in the trenches of KZbin.

[@flightman2870]

Can you please share me the those fuzzing videos link

[@hl2exe]

Would you be so kind as to share the reading material that you're talking about?

[@userhandle3378]

@@hl2exe I’m reading through the Grey Hat Hacking Handbook by McGraw Hill. Chapter 3 is fuzzing!

[@ukaszMarianszki]

a video on Matrix/Matrix Synapse and how it compares to XMPP would be neat

[@EmperorReinhard]

Matrix is a metadata disaster that feeds a bunch of info back to the main Synapse server. While your chats are end-to-end encrypted, the main Synapse server can still see who you are communicating with. That's not the worst of it, though. Matrix was funded by a company called Amdocs, which is an Israeli company that provides major wiretap and phone billing/record-keeping software contracts for the U.S. government. There are usability merits of Matrix over XMPP, but that does not excuse feeding metadata to a centralized source that you do not control. The metadata is still valuable information to glowies, even though they cannot see your E2E chats.

[@ChrisJones-rd4wb]

@Nobody its super bloat, XMPP is also super bloat

[@punishedpinecone4772]

My Matrix account was just purged for "suspicious activity". I use a VPN. That's all I can think of. Element would be great if the Matrix developers stopped being retards

[@nani8ot]

@@punishedpinecone4772 just use another homeserver. Matrix is decentralized/federated, nobody forces you to choose the biggest server. It’s the same with XMPP.

[@ChronosX88]

@@nani8ot for running own Matrix server you must have a supercomputer, because Synapse is very resource-hungry

[@egg5474]

The Death Star is now fully operational

[@FinderX]

some demonstration of how should work, in an session, like text, attachments and so on, will be nice.

[@Marco-yk8kp]

Day two of asking kenny to make a video on the mozilla is made by the feds situation

[@alessandrorossi1294]

Mozilla: owned by google, kicked out its founder Brendan Eich, encourages idiots to re-write mature and stable software in Rust for literally no reason whatsoever. Basically Mozilla is a glowie-controlled opp org for the glowies and the corporations.

[@JamesQHolden]

@@alessandrorossi1294 except it's open source.....................

[@alessandrorossi1294]

@@JamesQHolden that doesn’t change anything I said though

[@gnomsrepnay]

@@alessandrorossi1294 owned by google: mozilla is practically funded all by google, but it doesn't really change much about anything since it's almost all open source (basically only default search engine as far as I know), isn't brendan eich homophobic?, rust is good for maintainability

[@Marco-yk8kp]

@@alessandrorossi1294 I guess this is a good answer but i think kenny can explain it better and go into detail. And dont forget the pepe in the thumbnail, i always wonder where he gets those from

[@wirelesskiller8075]

This guy is one step above everyone in choosing thumbnails

[@dungeonseeker3087]

On the topic of server security, pretty much the first things I do on any of my servers is install fail2ban and change SSH from port 22. Here's a crazy anecdote, recently I had to reinstall one of my VPS' and after hitting reinstall I took my dog out for a 30 minute walk. I returned to an email with my SSH details, I fired up Putty, connected, signed in and the first thing CentOS did was inform me that there had been over 200 failed SSH login attempts since my last successful login (remember it was a fresh install so I had never logged in). Assuming a 10 minute reinstall time that means in 20 minutes of me leaving the server open on port 22 someone had port scanned me and tried to login to its secure shell over 200 times. Also remember, use CentOS for web based services since it comes OOTB preconfigured with firewall zones and rules applied. Ubuntu Server comes with UFW disabled and you have to manually create zones and rules before you enable it (otherwise it blocks port 22 which you're connected to). Firewalld also intergrates much nicer with Docker, it creates a docker zone for your docker networks automatically.

[@dksmqjzifssssdewxc3085]

Ran into prosidy xmpp the other day during a pentesting CTF. The version was obviously outdated but the most recent CVE had a rating of 7.5isb so make sure to update Prosidy (if you aren't in the habit of updating software regularly.) As always, great content. Always a good way to end my day, my nightly infosec resource for learning knew stuff. Thanks for what ya do for this community!

[@nobuyukinyuu]

*finally*, i had no idea why pidgin wasn't working for the past 15 years :v

[@woofwoof2412]

A note: Hashing doesn't work without specifying "authentication = internal_hashed" under the VirtualHost

[@pcislocked]

Setting up your own messaging server at a VPS is also a practice that I think we should consider questioning. How much can you trust on the host, or the server ISP to "not be spooky"?

[@kojitakamura2522]

you could just use them as a glorified proxy to a sneedable home server :^)

[@AKuTepion]

As long as you use end-to-end encryption, that shouldn't be much of a problem. I'm not sure how well that's supported within the XMPP ecosystem, though.

[@elEd0]

I literally configured a prosody server yesterday for work and now you upload a video nice! xD

[@alexdelarge9425]

I was just wondering how to set up my own XMPP server and boom...this video shows up. The algorithm gets me!

[@nono-pm2wj]

I fucking love you

[@mpsii]

timing, my dude... recently searched on this and got myself a bit confus-ed

[@Shiva-ff5ue]

Yee I been interested in hosting xmpp for a bit

[@AshasuChan]

Dude, you're awesome, this channel is pure gold

[@flightman2870]

The very low dislikes shows how good his viewers are, They exactly know what they watching Mental outlaw rocks

[@nightking1863]

man I remember using Jabber on late 2000s German "scene" boards... what a vibe

[@galaxy3432]

This is something I've been after for a while, so thanks for the upload!

[@tikoblocks3224]

Nice pfp

[@galaxy3432]

@@tikoblocks3224 thank you

[@FGj-xj7rd]

Installing and using XAMP (the windows one) was so much fun back in university. Man, those were the days.

[@thecashewtrader3328]

😢🥺

[@giveaway4002]

matrix vs xmpp please, i am really waiting for this from guys like you

[@BigYoshi826]

matrix is better

[@tikoblocks3224]

> Comments "Matrix is better" > Doesn't elaborate > Leaves

[@BigYoshi826]

@BUTTORFLĒOGE EXTRATÖNE shit I was just wrecked by that article I've been preparing and reading up to start contributing to matrix but now I'll change direction to xmpp

[@chronotriggerfan]

Matrix: Is an Israeli glow op XMPP: Is not an Israeli glow op /thread

[@targitausrithux2320]

@@chronotriggerfan Pretty sure it’s element that was the Israeli glow op

[@justinandrewhampton]

"alphabet boys at weird parties where they worship Moloch" 😂😂😂😂😂😂😂😂😂 It's funny cuz it's true.

[@e56-u6d]

Tor Hidden Service + XMPP server sounds pretty op

[@elliotalderson6769]

I wasn’t expecting a last second begonias grove reference thrown in there lol. Great video. Thanks!

[@systemthirtytwo]

Yes, i’ve wanted this!

[@nostrislife]

Been hosting since 2012. Love XMPP!

[@h.s3187]

Super scalable and very lightweight I am running prosody on my orange pi zero

[@ripthedvd9728]

You've done lots of videos on setting up servers like this XMPP video and the VPN video and you've also talked a lot about how the only way to have secure email is to host it yourself. You should do a video on how to set up just a regular server to hold files and email and stuff, and maybe even how to register to get a domain. Basic things like setting up a server, hooking it up to a public or private network, making it secure, interfacing with it, etc.

[@GhostkillerPlaysMC]

Not sure if you’re still interested but it’s incrediblyy complicated, running your own email server

[@floatingstonerecords7749]

Who knew that my hours and hours of Lua in Gmod would actually be worth something

[@jcrosenkreuz5213]

Just set one up myself, works great and was a neat experience!

[@therealchonk]

Yes, finally got a riscv64 Gentoo VM running. So happy right now. Btw good video

[@jastaneim9252]

Finally! XMPP is the best

[@Poshita697]

Yes!

[@69ms]

how are your thumbnails consistently so good lol

[@window.location]

So you are here because of "deepfake blackface channel" ?

[@xerneastrainer8111]

Yes.

[@gusstr20]

Could you do a video about FreeBSD? Or just BSD in general...?

[@hedgeearthridge6807]

I dont really see any reason why he would. Unless you're in the serverspace, it's like going back in time to late 90's linux where barely anything was supported and drivers didn't exist for much, plus having even LESS software compatibility than Linux.

[@gusstr20]

@@hedgeearthridge6807 I use it as a daily driver. It has plenty of software support and is updated. Imo, it's more secure, but I just wanna hear what he thinks.

[@oneanime5551]

@@gusstr20 yep i agree its getting better

[@SomeRandomPiggo]

linux is already great though, and there is no reason to switch apart from it being different since linux is open source and free, with better compatibility and ease of use

[@hypnoz7871]

@@gusstr20 You say it's more secure because you're regurgitating BS you heard elsewhere. Less eyes = less secure code. And nobody, i mean nobody use BSD, especially OpenBSD which is ony useful for server side. NSA do know better than you and they certainly do NOT use BSD for their desktop environment.

[@mohanroy1434]

Thanks man!, Need this. Luke Smith would blabber how this is good and blah blah but he'd never how setup an xmpp server . You're the legit guy.

[@mid-]

Nice thumbnail my guy

[@user-zu6ts5fb6g]

just found this channel, your videos are top notch

[@FourOf92000]

can we get one on Matrix server setup as well?

[@asianmeatball6683]

yeah

[@snowcloudshinobi]

this

[@knight9015]

Yes

Please

[@purplep3466]

Sure

[@h.s3187]

XMPP vs Matrix , XMPP is more documented if you want to host an hidden service on I2P or TOR

[@ximi2377]

Will your ever make a video on a BSD distro?

[@MentalOutlaw]

Maybe as a server, I've been experimenting with using OpenBSD for web apps instead of Debian since I think it has better security. The problem is there's fewer guides and compatible software, and I'm a noob at webdev (currently teaching myself fullstack) so its a bit of a challenge.

[@player-8740]

@@MentalOutlaw could you please make a video about the Tox protocol. it's one of the best and most promissing p2p projects I've seen in a while.

[@atalocke]

@@MentalOutlaw what stack are you using?

[@Bagginsess]

Could you do a video covering how to secure an envelope and pigeon? Or should I use hawk/raven?

[@gingerwitch64]

It's as the old saying goes; "If you want something done right, you have to do it yourself."

[@ThePowerRanger]

Your thumbnail game is on another level.

[@snipzmattio5887]

I like it, but who im I going to talk to? All my friends are 100% normies

[@jacobwarners887]

Any thoughts on taking this and connecting it to a matrix server if you can?

[@ghoulbuster1]

Breaking Glow

[@jhny0]

Mannnn this videos are so based, great stuff

[@silentlord2324]

youtube have blocked age restricted videos on mpv. Do you now how to fix it for a windows normie like me?

[@ishaqahmed._]

Legendary thumbnail man

[@Reatret]

Can you post the nginx config? I got to that point in the video and I don't think you share the entire config.

[@doommaker4000]

"worship Moloch" Just how based can a man be?

[@looweegee252]

He may very well be Christian level based The highest tier and original meaning of Based being Biblically Based (To build on a solid base instead of illogical shifting sands)

[@MemesnShet]

The thumbnail lol

[@sexualsmile]

Mental outlaw. If you could do a tutorial on how to setup a Gemini Capsula that would be great! I wanna go back to the good internet.

[@guacfiend]

awesome channel man!!!

[@Reedelenz]

Noice

[@tikkasen_urakointi]

I wrote my own IRC server in C in one week.

[@aneeshprasobhan]

This is an off topic question. Why do you use gentoo ? What specific thing/features do you use on gentoo that's not possible on Arch (for example) ?

[@weebney]

emerge gives him plenty of time to get his reps in

[@FGj-xj7rd]

Gentoo penguins are pretty fast on water. I would say this is the reason.

[@MentalOutlaw]

Personally I consider the documentation and forums for Gentoo to be better than Arch. As far as technical differences go Gentoo allows you easily compile individual packages and your kernel in different ways which adds a whole new layer of customization that Arch users don't get into (unless they decide to pull the source code and compile themselves instead of installing binaries with pacman)

[@webtek7928]

Hey whats your thoughts on SimpleX? Would you be able to do video about SimpleX from understanding of it, the privacy and anonymity is the best out there.

[@aheraldofthenewage2039]

That thumbnail tho.. lit

[@porterhouse937]

Appreciate your thumbnail game my dude

[@finnaerix9837]

You could use matrix, if you want a federated server infrastructure

[@chronotriggerfan]

Matrix is an Israeli glow op.

[@targitausrithux2320]

@@chronotriggerfan Pretty sure it’s the client known as element that is the Israeli glow op, you liar

[@RamkrishanYT]

Indian government might ban e2e encryption chats So I do indeed plan to host a chat server

[@addy7445]

Our government is becoming trash day by day😂 privacy me piracy daal rahe hai

[@MiniatureChickenChannel]

Are you down with XMPP??

[@dbking932]

I always wanted good privacy 😂

[@sdsdsdssdsdxdd]

What are the upsides of a XMPP server over a selfhosted IRC server apart from it being a more lightweight solution?

[@rolandsharp]

e2e encryption

[@gotoastal]

Federation too. You can’t join a IRC server without creating an account on that server. A lot of feature comforts added as well like getting some of the chat history, messages received when you come back online, no line length limitations, etc.

[@ceramintreal]

woah thanks man, very cool

[@kathanshah8305]

When thumbnail creation takes more time than making the video

[@Ex_impius]

Why are you not uploading to Odysee? I'd rather watch as many people over there as I can instead of KZbin.

[@thecashewtrader3328]

Yes

[@sarundayo]

Get down with XMPP, yeah you know me ♫

[@anon5258]

Got Instagram ad on this nice one KZbin

Please do Matrix next!

[@AesculapiusPiranha]

My problem with privacy apps is who the fk do I talk to on them?

[@srlorch406]

What about Matrix?

[@Vincent-dt4jx]

Great video, can’t wait to try it myself 👍

[@wesleyoliveira6570]

UwU

[@tikoblocks3224]

Ok

[@pixelucy]

xmpp best pp

[@whitepaperkat67]

You don't really have to set up a web server. I mean I've done this without doing that I even enabled pub sub and was able to work out the issue with my subdomains and SSL certificates

[@vikiteodor3353]

Hidden Terry Davis in thumbnail, the creator of TempleOS

[@nightking1863]

Thanks Luke

[@plazmaguy13yago9]

XMPP i cant think of ot seriously Extended Mesmorizing pp I still laugh at fart jokes

[@ChessCat1500]

thanks. now I can communicate with my drug dealer easily..

[@uncleted9362]

Glowies seething right now

[@samuelkahunga5987]

I like the Moloch part

[@MKULTRA_Victim_]

That ending tho 🤣

[@FractionalReserve33]

"At their weird parties where they worship molech", LOL!

[@lifebarier]

How can users register to this xmpp instance of mine? also e2e encryption was not covered

[@gotoastal]

They don’t have to… it’s federated. You can just create a few accounts to give to friends & instruct them to change passwords as needed. If they’re not your friends, just tell them to find their own server to join.

[@itsme7570]

Mental outlaw are you on other platforms in case they get rid of your channel?

[@myfavouritecolorisgreen]

terry davis

[@randomdebris]

No comparison to Jami (.net)?

[@Atilolzz]

Eksem Peepee is a funny name tbqh 😳

[@dayumnson9769]

Why are so many governments using astraChat? I can't finde the source code for it? Is it even open source? I am confused

[@kantraa]

9:11 i'm using apache. there is no conf.d directory there. do i just create one at /etc/apache2/conf-enabled?????

[@szaszm_]

The three letter "bois" can still just take the keys from your server if they want to and wiretap it all. The server provider most likely has easy access to your root fs.

[@konakun7878]

Thats why you use end 2 end encryption with verified contacts only, no private keys are stored on the server anyways.

[@eustab.anas-mann9510]

XMPP is awesome, but nobody I know would ever move beyond Whatsapp. What's the point of having an XMPP account with 0 (zero) friends?

[@sjxsubham...]

can this is accessible in windows??😊

[@heretic0014]

That thumnail LMFAO

[@daddychill4457]

could you go through OTR with XMPP? Not sure if Profanity is a good service.