ViewVC Help

View File | Revision Log | Show Annotations | View Changeset | Root Listing

root/svn/ircd-hybrid/releases/8.1.0beta4/doc/reference.conf

Comparing:
ircd-hybrid-8/etc/example.conf (file contents), Revision 1285 by michael, Sun Feb 5 15:12:59 2012 UTC vs.
ircd-hybrid-8/doc/example.conf (file contents), Revision 1424 by michael, Tue May 29 19:32:59 2012 UTC

#	Line 1 | Line 1
1	<	/* doc/example.conf - ircd-hybrid-7 Example configuration file
2	<	* Copyright (C) 2000-2011 Hybrid Development Team
1	>	/* doc/example.conf - ircd-hybrid-8 Example configuration file
2	>	* Copyright (C) 2000-2012 Hybrid Development Team
3		*
4		* Written by ejb, wcampbel, db, leeh and others
5		* Other example configurations can be found in the source dir under
#	Line 39 | Line 39
39		*/
40
41		/*
42	<	* serverinfo {}:  contains information about the server. (OLD M:)
42	>	* serverinfo {}:  contains information about the server
43		*/
44		serverinfo {
45		/*
#	Line 124 | Line 124 | serverinfo {
124		*/
125		#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
126
127	+
128	+	/*
129	+	* ssl_dh_param_file:
130	+	*
131	+	* Path to the PEM encoded Diffie-Hellman parameter file.
132	+	* DH parameters are strictly required when using ciphers
133	+	* with EDH (ephemeral Diffie-Hellman) key exchange.
134	+	*
135	+	* A DH parameter file can be created by running:
136	+	*
137	+	*      openssl dhparam -out dhparam.pem 1024
138	+	*
139	+	* Further information regarding specific OpenSSL dhparam
140	+	* command-line options can be found in the OpenSSL manual.
141	+	*/
142	+	#ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem";
143	+
144		/*
145	<	* ssl_server_protocol:
146	<	* SSL/TLS protocols we provide for incoming secure connections.
145	>	* ssl_cipher_list:
146	>	*
147	>	* List of ciphers that are supported by _this_ server. Can be used to enforce
148	>	* specific ciphers for incoming SSL/TLS connections.
149	>	* If a client (which also includes incoming server connections) isn't capable
150	>	* of any cipher listed below, the connection will simply be rejected.
151	>	*
152	>	* A list of supported ciphers can be obtained by running:
153	>	*
154	>	*      openssl ciphers -ssl3 -tls1 -v
155	>	*
156	>	* Multiple ciphers are separated by colons. The order of preference is from
157	>	* left to right.
158	>	*/
159	>	#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
160	>
161	>	/*
162	>	* ssl_server_method:
163	>	* ssl_client_method:
164	>	*
165	>	* SSL/TLS methods we provide for incoming (server method) and
166	>	* outgoing (client method) SSL/TLS connections.
167		* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1.
168	<	* SSLv2 is not suppported. This cannot be changed at runtime.
168	>	* SSLv2 is not suppported.
169		*/
170	<	#ssl_server_protocol = sslv3, tlsv1;
170	>	#ssl_server_method = tlsv1, sslv3;
171	>	#ssl_client_method = tlsv1;
172		};
173
174		/*
#	Line 343 | Line 381 | operator {
381
382		/*
383		* user: the user@host required for this operator. Multiple
384	<	* user="" lines are supported.
384	>	* user="" lines are supported.
385		*/
386		user = "*god@192.168.0.0/16";
387		user = "*@127.0.0.0/8";
#	Line 387 | Line 425 | operator {
425		* +f - full         - See I: line full notices
426		* +G - softcallerid - Server Side Ignore for users not on your channels
427		* +g - callerid     - Server Side Ignore (for privmsgs etc)
428	+	* +H - hidden       - Hides operator status to other users
429		* +i - invisible    - Not shown in NAMES or WHO unless you share a
430		*                     a channel
431	+	* +j - rej          - See rejected client notices
432		* +k - skill        - See server generated KILL messages
433		* +l - locops       - See LOCOPS messages
434		* +n - nchange      - See client nick changes
395	–	* +r - rej          - See rejected client notices
435		* +s - servnotice   - See general server notices
436		* +u - unauth       - See unauthorized client notices
437		* +w - wallop       - See server generated WALLOPS
#	Line 411 | Line 450 | operator {
450		* global_kill  - allows remote users to be /KILL'd
451		* remote       - allows remote SQUIT and CONNECT
452		* remoteban    - allows remote KLINE/UNKLINE
453	<	* kline        - allows KILL, KLINE and DLINE
454	<	* unkline      - allows UNKLINE and UNDLINE
453	>	* dline        - allows DLINE
454	>	* undline      - allows UNDLINE
455	>	* kline        - allows KILL and KLINE
456	>	* unkline      - allows UNKLINE
457		* gline        - allows GLINE
458		* xline        - allows XLINE
459		* globops      - allows GLOBOPS
#	Line 423 | Line 464 | operator {
464		* restart      - allows RESTART
465		* admin        - gives admin privileges. admins for example,
466		*                may see the real IP addresses of servers.
426	–	* hidden_admin - same as 'admin', but noone can recognize you as
427	–	*                being an admin
428	–	* hidden_oper  - not shown in /stats p (except for other operators)
467		*/
468		flags = global_kill, remote, kline, unkline, xline, globops, restart,
469		die, rehash, nick_changes, admin, operwall, module;
#	Line 433 | Line 471 | operator {
471
472		service {
473		name = "service.someserver";
474	<	name = "stats.someserver;
474	>	name = "stats.someserver";
475		};
476
477		/*
#	Line 487 | Line 525 | connect {
525		/* class: the class this server is in */
526		class = "server";
527
528	+	#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
529	+
530		/*
531		* autoconn   - controls whether we autoconnect to this server or not,
532		*              dependent on class limits. By default, this is disabled.
493	–	* compressed - controls whether traffic is compressed via ziplinks.
494	–	*              By default, this is disabled
495	–	* cryptlink  - enable full encryption for all data passing between our
496	–	*              server and this link and rsa authentication.
533		* burst_away - This will send the /away string that users have set
534	<	*              on the server burst.  Note this can be a lot of data
534	>	*              on the server burst. Note this can be a lot of data
535		*              and slow down your server burst.
536	<	* topicburst - Send topics to this server during channel burst.  Works
536	>	* topicburst - Send topics to this server during channel burst. Works
537		*              only if the server we are connecting to is capable
538		*              of TBURST/TB.
539	+	* ssl        - Initiates a TLS/SSL connection.
540		*/
541	<	#       flags = autoconn, compressed, cryptlink, burst_away, topicburst;
505	<	};
506	<
507	<	connect {
508	<	name = "encrypted.auth.example";
509	<	host = "some.host.somewhere";
510	<	port = 6667;
511	<
512	<	flags = cryptlink;
513	<
514	<	/*
515	<	* rsa_public_key_file: the path to the public keyfile of the server.
516	<	* Used instead of passwords.
517	<	*/
518	<	rsa_public_key_file = "etc/remote.server.keyfile";
519	<
520	<	/*
521	<	* cipher preference: set the preferred cipher for this link
522	<	*
523	<	* Available ciphers are:
524	<	*      BF/168 BF/128 CAST/128 IDEA/128 RC5.16/128
525	<	*      RC5.12/128 RC5.8/128 3DES/168 DES/56
526	<	*
527	<	* NOTE:  Some ciphers may not be supported by your OpenSSL.
528	<	*        Check the output from 'configure' for available ciphers.
529	<	*
530	<	* NOTE2: To help you decide what cipher to use, tools/encspeed
531	<	*        will show you approximately how fast each cipher is.
532	<	*        However, blowfish is fast and secure, and is probably
533	<	*        a good default for most situations.
534	<	*
535	<	* NOTE3: Default if none is set is BF/128
536	<	*
537	<	* The cipher *MUST* be the same in both directions.  If you
538	<	* set a cipher preference, your uplink must set the same cipher,
539	<	* else it will not link.
540	<	*/
541	<	#       cipher_preference = "BF/168";
541	>	#       flags = autoconn, burst_away, topicburst;
542		};
543
544		connect {
#	Line 576 | Line 576 | cluster {
576
577		/*
578		* type: list of what to share, options are as follows:
579	<	*      kline   - share klines
580	<	*      tkline  - share temporary klines
581	<	*      unkline - share unklines
582	<	*      xline   - share xlines
583	<	*      txline  - share temporary xlines
584	<	*      unxline - share unxlines
585	<	*      resv    - share resvs
586	<	*      tresv   - share temporary resvs
587	<	*      unresv  - share unresvs
588	<	*      locops  - share locops
589	<	*      all     - share all of the above (default)
579	>	*      dline   - share dlines
580	>	*      undline - share undlines
581	>	*      kline   - share klines
582	>	*      unkline - share unklines
583	>	*      xline   - share xlines
584	>	*      unxline - share unxlines
585	>	*      resv    - share resvs
586	>	*      unresv  - share unresvs
587	>	*      locops  - share locops
588	>	*      all     - share all of the above (default)
589		*/
590		type = kline, unkline, locops, xline, resv;
591		};
#	Line 615 | Line 614 | shared {
614
615		/*
616		* type: list of what to share, options are as follows:
617	<	*      kline   - allow oper/server to kline
618	<	*      tkline  - allow temporary klines
619	<	*      unkline - allow oper/server to unkline
620	<	*      xline   - allow oper/server to xline
621	<	*      txline  - allow temporary xlines
622	<	*      unxline - allow oper/server to unxline
623	<	*      resv    - allow oper/server to resv
624	<	*      tresv   - allow temporary resvs
626	<	*      unresv  - allow oper/server to unresv
617	>	*      dline   - allow oper/server to dline
618	>	*      undline - allow oper/server to undline
619	>	*      kline   - allow oper/server to kline
620	>	*      unkline - allow oper/server to unkline
621	>	*      xline   - allow oper/server to xline
622	>	*      unxline - allow oper/server to unxline
623	>	*      resv    - allow oper/server to resv
624	>	*      unresv  - allow oper/server to unresv
625		*      locops  - allow oper/server to locops - only used for servers that cluster
626	<	*      all     - allow oper/server to do all of the above (default)
626	>	*      all     - allow oper/server to do all of the above (default)
627		*/
628		type = kline, unkline, resv;
629		};
#	Line 731 | Line 729 | channel {
729		*   3 | mirc color
730		*  15 | plain text
731		*  22 | reverse
732	+	*  29 | italic
733		*  31 | underline
734		* 160 | non-breaking space
735		*/
#	Line 779 | Line 778 | channel {
778		knock_delay_channel = 1 minute;
779
780		/*
782	–	* burst_topicwho: enable sending of who set topic on topicburst
783	–	* default is yes
784	–	*/
785	–	burst_topicwho = yes;
786	–
787	–	/*
781		* max_chans_per_user: The maximum number of channels a user can
782		* join/be on.
783		*/
#	Line 1148 | Line 1141 | general {
1141		* +f - full         - See I: line full notices
1142		* +G - softcallerid - Server Side Ignore for users not on your channels
1143		* +g - callerid     - Server Side Ignore (for privmsgs etc)
1144	+	* +H - hidden       - Hides operator status to other users
1145		* +i - invisible    - Not shown in NAMES or WHO unless you share a
1146		*                     a channel
1147	+	* +j - rej          - See rejected client notices
1148		* +k - skill        - See server generated KILL messages
1149		* +l - locops       - See LOCOPS messages
1150		* +n - nchange      - See client nick changes
1156	–	* +r - rej          - See rejected client notices
1151		* +s - servnotice   - See general server notices
1152		* +u - unauth       - See unauthorized client notices
1153		* +w - wallop       - See server generated WALLOPS
#	Line 1163 | Line 1157 | general {
1157		*/
1158
1159		/* oper_only_umodes: usermodes only opers may set */
1160	<	oper_only_umodes = bots, cconn, cconn_full, debug, full, skill,
1160	>	oper_only_umodes = bots, cconn, cconn_full, debug, full, hidden, skill,
1161		nchange, rej, spy, external, operwall,
1162		locops, unauth;
1163
#	Line 1171 | Line 1165 | general {
1165		oper_umodes = bots, locops, servnotice, operwall, wallop;
1166
1167		/*
1174	–	* servlink_path: path to 'servlink' program used by ircd to handle
1175	–	* encrypted/compressed server <-> server links.
1176	–	*
1177	–	* only define if servlink is not in same directory as ircd itself.
1178	–	*/
1179	–	#servlink_path = "/usr/local/ircd/bin/servlink";
1180	–
1181	–	/*
1182	–	* default_cipher_preference: default cipher to use for cryptlink when none is
1183	–	* specified in connect block.
1184	–	*/
1185	–	#default_cipher_preference = "BF/168";
1186	–
1187	–	/*
1168		* use_egd: if your system does not have *random devices yet you
1169		* want to use OpenSSL and encrypted links, enable this.  Beware -
1170		* EGD is *very* CPU intensive when gathering data for its pool
#	Line 1197 | Line 1177 | general {
1177		*/
1178		#       egdpool_path = "/var/run/egd-pool";
1179
1200	–
1201	–	/*
1202	–	* compression_level: level of compression for compressed links between
1203	–	* servers.
1204	–	*
1205	–	* values are between: 1 (least compression, fastest)
1206	–	*                and: 9 (most compression, slowest).
1207	–	*/
1208	–	#       compression_level = 6;
1209	–
1180		/*
1181		* throttle_time: the minimum amount of time between connections from
1182		* the same ip.  exempt {} blocks are excluded from this throttling.
#	Line 1247 | Line 1217 | glines {
1217
1218		/*
1219		* action: action to take when a matching gline is found. options are:
1220	<	*  reject      - do not apply the gline locally
1221	<	*  block       - do not propagate the gline
1220	>	*  reject - do not apply the gline locally
1221	>	*  block  - do not propagate the gline
1222		*/
1223		action = reject, block;
1224
#	Line 1275 | Line 1245 | modules {
1245		log {
1246		/* Do you want to enable logging to ircd.log? */
1247		use_logging = yes;
1278	–	timestamp = yes;
1248
1249		file {
1250		type = oper;

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines (old)
>	Changed lines (new)