Looks good. A couple more things I find useful to set with Prosody are:

- The firewall module to blacklist spammers; that can be done with a system-wide firewall as well, but it is nicer for diagnostics to serve proper errors, not just to drop packets or refuse connections.

- The bosh and websocket modules, to use with converse.js. A web UI is convenient to have for logging in from systems without XMPP clients.