| 73 |
|
* vhost: the IP to bind to when we connect outward to ipv4 servers. |
| 74 |
|
* This should be an ipv4 IP only, or "*" for INADDR_ANY. |
| 75 |
|
*/ |
| 76 |
< |
#vhost = "192.169.0.1"; |
| 76 |
> |
# vhost = "192.169.0.1"; |
| 77 |
|
|
| 78 |
|
/* |
| 79 |
|
* vhost6: the IP to bind to when we connect outward to ipv6 servers. |
| 80 |
|
* This should be an ipv6 IP only, or "*" for INADDR_ANY. |
| 81 |
|
*/ |
| 82 |
< |
#vhost6 = "3ffe:80e8:546::2"; |
| 82 |
> |
# vhost6 = "3ffe:80e8:546::2"; |
| 83 |
|
|
| 84 |
|
/* max_clients: the maximum number of clients allowed to connect. */ |
| 85 |
|
max_clients = 512; |
| 110 |
|
* chmod 0600 rsa.key |
| 111 |
|
* chmod 0644 rsa.pub |
| 112 |
|
*/ |
| 113 |
< |
#rsa_private_key_file = "/usr/local/ircd/etc/rsa.key"; |
| 113 |
> |
# rsa_private_key_file = "/usr/local/ircd/etc/rsa.key"; |
| 114 |
|
|
| 115 |
|
/* |
| 116 |
|
* ssl_certificate_file: the path to the file containing our |
| 132 |
|
* Common Name: irc.someirc.net |
| 133 |
|
* E-mail: you@domain.com |
| 134 |
|
*/ |
| 135 |
< |
#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem"; |
| 135 |
> |
# ssl_certificate_file = "/usr/local/ircd/etc/cert.pem"; |
| 136 |
|
|
| 137 |
|
/* |
| 138 |
|
* ssl_dh_param_file: |
| 149 |
|
* regarding specific OpenSSL dhparam command-line options |
| 150 |
|
* can be found in the OpenSSL manual. |
| 151 |
|
*/ |
| 152 |
< |
#ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem"; |
| 152 |
> |
# ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem"; |
| 153 |
|
|
| 154 |
|
/* |
| 155 |
|
* ssl_cipher_list: |
| 167 |
|
* Multiple ciphers are separated by colons. The order of preference is |
| 168 |
|
* from left to right. |
| 169 |
|
*/ |
| 170 |
< |
#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA"; |
| 170 |
> |
# ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA"; |
| 171 |
|
|
| 172 |
|
/* |
| 173 |
|
* ssl_server_method: |
| 177 |
|
* outgoing (client method) SSL/TLS connections. |
| 178 |
|
* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1. |
| 179 |
|
*/ |
| 180 |
< |
#ssl_server_method = tlsv1, sslv3; |
| 181 |
< |
#ssl_client_method = tlsv1; |
| 180 |
> |
# ssl_server_method = tlsv1, sslv3; |
| 181 |
> |
# ssl_client_method = tlsv1; |
| 182 |
|
}; |
| 183 |
|
|
| 184 |
|
/* |
| 292 |
|
}; |
| 293 |
|
|
| 294 |
|
/* |
| 295 |
< |
* motd {}: specifies various MOTD files. Applies to local users only. |
| 295 |
> |
* motd {}: Allows to show a different MOTD to a client |
| 296 |
> |
* depending on its origin. Applies to local users only. |
| 297 |
|
*/ |
| 298 |
|
motd { |
| 299 |
|
/* |
| 305 |
|
mask = "*.ch"; |
| 306 |
|
|
| 307 |
|
/* |
| 308 |
< |
* file: path top the actual motd file. |
| 308 |
> |
* file: path to the actual motd file. |
| 309 |
|
*/ |
| 310 |
|
file = "/usr/local/ircd/etc/german.motd"; |
| 311 |
|
}; |
| 457 |
|
*/ |
| 458 |
|
# rsa_public_key_file = "/usr/local/ircd/etc/oper.pub"; |
| 459 |
|
|
| 460 |
+ |
/* |
| 461 |
+ |
* fingerprint: enhances security by additionally checking the oper's |
| 462 |
+ |
* client certificate fingerprint against the specified fingerprint |
| 463 |
+ |
* below. |
| 464 |
+ |
* |
| 465 |
+ |
* Hint: your users can use the following command to obtain a SHA-256 hash |
| 466 |
+ |
* of their ssl certificate: |
| 467 |
+ |
* |
| 468 |
+ |
* openssl x509 -sha256 -noout -fingerprint -in cert.pem | sed -e 's/^.*=//;s/://g' |
| 469 |
+ |
*/ |
| 470 |
+ |
# fingerprint = "4C62287BA6776A89CD4F8FF10A62FFB35E79319F51AF6C62C674984974FCCB1D"; |
| 471 |
+ |
|
| 472 |
|
/* class: the class the oper joins when they successfully /oper */ |
| 473 |
|
class = "opers"; |
| 474 |
|
|
| 479 |
|
* |
| 480 |
|
* +b - bots - See bot and drone flooding notices |
| 481 |
|
* +c - cconn - Client connection/quit notices |
| 469 |
– |
* +C - cconn_full - Client connection/quit notices full |
| 482 |
|
* +D - deaf - Don't receive channel messages |
| 483 |
|
* +d - debug - See debugging notices |
| 484 |
|
* +e - external - See remote server connection and split notices |
| 500 |
|
* +y - spy - See LINKS, STATS, TRACE notices etc. |
| 501 |
|
* +z - operwall - See oper generated WALLOPS |
| 502 |
|
*/ |
| 503 |
< |
# umodes = locops, servnotice, operwall, wallop; |
| 503 |
> |
umodes = locops, servnotice, operwall, wallop; |
| 504 |
|
|
| 505 |
|
/* |
| 506 |
|
* privileges: controls the activities and commands an oper is |
| 609 |
|
* Multiple ciphers are separated by colons. The order of preference |
| 610 |
|
* is from left to right. |
| 611 |
|
*/ |
| 612 |
< |
#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA"; |
| 612 |
> |
# ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA"; |
| 613 |
> |
|
| 614 |
> |
/* |
| 615 |
> |
* fingerprint: enhances security by additionally checking the server's |
| 616 |
> |
* client certificate fingerprint against the specified fingerprint |
| 617 |
> |
* below. |
| 618 |
> |
*/ |
| 619 |
> |
# fingerprint = "4C62287BA6776A89CD4F8FF10A62FFB35E79319F51AF6C62C674984974FCCB1D"; |
| 620 |
|
|
| 621 |
|
/* |
| 622 |
|
* autoconn - controls whether we autoconnect to this server or not, |
| 868 |
|
*/ |
| 869 |
|
serverhide { |
| 870 |
|
/* |
| 871 |
+ |
* disable_remote_commands: disable users doing commands |
| 872 |
+ |
* on remote servers. |
| 873 |
+ |
*/ |
| 874 |
+ |
disable_remote_commands = no; |
| 875 |
+ |
|
| 876 |
+ |
/* |
| 877 |
|
* flatten_links: this option will show all servers in /links appear |
| 878 |
|
* that they are linked to this current server. |
| 879 |
|
*/ |
| 994 |
|
*/ |
| 995 |
|
disable_auth = no; |
| 996 |
|
|
| 972 |
– |
/* disable_remote_commands: disable users doing commands on remote servers. */ |
| 973 |
– |
disable_remote_commands = no; |
| 974 |
– |
|
| 997 |
|
/* |
| 998 |
|
* tkline_expire_notices: enables or disables temporary kline/xline |
| 999 |
|
* expire notices. |
| 1155 |
|
* |
| 1156 |
|
* +b - bots - See bot and drone flooding notices |
| 1157 |
|
* +c - cconn - Client connection/quit notices |
| 1136 |
– |
* +C - cconn_full - Client connection/quit notices full |
| 1158 |
|
* +D - deaf - Don't receive channel messages |
| 1159 |
|
* +d - debug - See debugging notices |
| 1160 |
|
* +e - external - See remote server connection and split notices |
| 1178 |
|
*/ |
| 1179 |
|
|
| 1180 |
|
/* oper_only_umodes: usermodes only opers may set */ |
| 1181 |
< |
oper_only_umodes = bots, cconn, cconn_full, debug, full, hidden, skill, |
| 1181 |
> |
oper_only_umodes = bots, cconn, debug, full, hidden, skill, |
| 1182 |
|
nchange, rej, spy, external, operwall, |
| 1183 |
|
locops, unauth, farconnect; |
| 1184 |
|
|
| 1216 |
|
path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload"; |
| 1217 |
|
|
| 1218 |
|
/* module: the name of a module to load on startup/rehash. */ |
| 1219 |
< |
#module = "some_module.la"; |
| 1219 |
> |
# module = "some_module.la"; |
| 1220 |
|
}; |
| 1221 |
|
|
| 1222 |
|
/* |
| 1228 |
|
|
| 1229 |
|
file { |
| 1230 |
|
type = oper; |
| 1231 |
< |
name = "/home/ircd/var/log/oper.log"; |
| 1231 |
> |
name = "/usr/local/ircd/var/log/oper.log"; |
| 1232 |
|
size = unlimited; |
| 1233 |
|
}; |
| 1234 |
|
|
| 1235 |
|
file { |
| 1236 |
|
type = user; |
| 1237 |
< |
name = "/home/ircd/var/log/user.log"; |
| 1237 |
> |
name = "/usr/local/ircd/var/log/user.log"; |
| 1238 |
|
size = 50 megabytes; |
| 1239 |
|
}; |
| 1240 |
|
|
| 1241 |
|
file { |
| 1242 |
|
type = kill; |
| 1243 |
< |
name = "/home/ircd/var/log/kill.log"; |
| 1243 |
> |
name = "/usr/local/ircd/var/log/kill.log"; |
| 1244 |
|
size = 50 megabytes; |
| 1245 |
|
}; |
| 1246 |
|
|
| 1247 |
|
file { |
| 1248 |
|
type = kline; |
| 1249 |
< |
name = "/home/ircd/var/log/kline.log"; |
| 1249 |
> |
name = "/usr/local/ircd/var/log/kline.log"; |
| 1250 |
|
size = 50 megabytes; |
| 1251 |
|
}; |
| 1252 |
|
|
| 1253 |
|
file { |
| 1254 |
|
type = dline; |
| 1255 |
< |
name = "/home/ircd/var/log/dline.log"; |
| 1255 |
> |
name = "/usr/local/ircd/var/log/dline.log"; |
| 1256 |
|
size = 50 megabytes; |
| 1257 |
|
}; |
| 1258 |
|
|
| 1259 |
|
file { |
| 1260 |
|
type = gline; |
| 1261 |
< |
name = "/home/ircd/var/log/gline.log"; |
| 1261 |
> |
name = "/usr/local/ircd/var/log/gline.log"; |
| 1262 |
|
size = 50 megabytes; |
| 1263 |
|
}; |
| 1264 |
|
|
| 1265 |
|
file { |
| 1266 |
|
type = debug; |
| 1267 |
< |
name = "/home/ircd/var/log/debug.log"; |
| 1267 |
> |
name = "/usr/local/ircd/var/log/debug.log"; |
| 1268 |
|
size = 50 megabytes; |
| 1269 |
|
}; |
| 1270 |
|
}; |