mod_graceful_shutdown: Deactivate direct TLS c2s along with plain c2s
Stops clients from reconnecting that way after their sessions are closed
--- a/mod_graceful_shutdown/mod_graceful_shutdown.lua Wed Feb 09 18:16:33 2022 +0100
+++ b/mod_graceful_shutdown/mod_graceful_shutdown.lua Fri Feb 11 16:11:55 2022 +0100
@@ -20,6 +20,9 @@
coroutine.yield(true, "shutdown initiated");
-- Close c2s ports, stop accepting new connections
portman.deactivate("c2s");
+ portman.deactivate("legacy_ssl");
+ portman.deactivate("c2s_direct_tls");
+
-- Close all c2s sessions
for _, sess in pairs(prosody.full_sessions) do
sess:close{ condition = "system-shutdown", text = reason }