if you are running prosody, here (1) on page 44 are specific settings for usage. cc !
xmpp
(1)
https://bettercrypto.org/static/applied-crypto-hardening.pdf