ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/trunk/doc/reference.conf
(Generate patch)

Comparing ircd-hybrid/trunk/doc/reference.conf (file contents):
Revision 2150 by michael, Fri May 31 18:39:43 2013 UTC vs.
Revision 2236 by michael, Sat Jun 15 18:55:39 2013 UTC

# Line 73 | Line 73 | serverinfo {
73           * vhost: the IP to bind to when we connect outward to ipv4 servers.
74           * This should be an ipv4 IP only, or "*" for INADDR_ANY.
75           */
76 <        #vhost = "192.169.0.1";
76 > #       vhost = "192.169.0.1";
77  
78          /*
79           * vhost6: the IP to bind to when we connect outward to ipv6 servers.
80           * This should be an ipv6 IP only, or "*" for INADDR_ANY.
81           */
82 <        #vhost6 = "3ffe:80e8:546::2";
82 > #       vhost6 = "3ffe:80e8:546::2";
83  
84          /* max_clients: the maximum number of clients allowed to connect. */
85          max_clients = 512;
# Line 110 | Line 110 | serverinfo {
110           *      chmod 0600 rsa.key
111           *      chmod 0644 rsa.pub
112           */
113 <        #rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
113 > #       rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
114  
115          /*
116           * ssl_certificate_file: the path to the file containing our
# Line 132 | Line 132 | serverinfo {
132           *      Common Name: irc.someirc.net
133           *      E-mail: you@domain.com
134           */
135 <        #ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
135 > #       ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
136  
137          /*
138           * ssl_dh_param_file:
# Line 149 | Line 149 | serverinfo {
149           * regarding specific OpenSSL dhparam command-line options
150           * can be found in the OpenSSL manual.
151           */
152 <        #ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem";
152 > #       ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem";
153  
154          /*
155           * ssl_cipher_list:
# Line 167 | Line 167 | serverinfo {
167           * Multiple ciphers are separated by colons. The order of preference is
168           * from left to right.
169           */
170 <        #ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
170 > #       ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
171  
172          /*
173           * ssl_server_method:
# Line 177 | Line 177 | serverinfo {
177           * outgoing (client method) SSL/TLS connections.
178           * This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1.
179           */
180 <        #ssl_server_method = tlsv1, sslv3;
181 <        #ssl_client_method = tlsv1;
180 > #       ssl_server_method = tlsv1, sslv3;
181 > #       ssl_client_method = tlsv1;
182   };
183  
184   /*
# Line 292 | Line 292 | class {
292   };
293  
294   /*
295 < * motd {}: specifies various MOTD files. Applies to local users only.
295 > * motd {}: Allows to show a different MOTD to a client
296 > * depending on its origin. Applies to local users only.
297   */
298   motd {
299          /*
# Line 304 | Line 305 | motd {
305          mask = "*.ch";
306  
307          /*
308 <         * file: path top the actual motd file.
308 >         * file: path to the actual motd file.
309           */
310          file = "/usr/local/ircd/etc/german.motd";
311   };
# Line 456 | Line 457 | operator {
457           */
458   #       rsa_public_key_file = "/usr/local/ircd/etc/oper.pub";
459  
460 +        /*
461 +         * fingerprint: enhances security by additionally checking the oper's
462 +         * client certificate fingerprint against the specified fingerprint
463 +         * below.
464 +         *
465 +         * Hint: your users can use the following command to obtain a SHA-256 hash
466 +         * of their ssl certificate:
467 +         *
468 +         *      openssl x509 -sha256 -noout -fingerprint -in cert.pem | sed -e 's/^.*=//;s/://g'
469 +         */
470 + #       fingerprint = "4C62287BA6776A89CD4F8FF10A62FFB35E79319F51AF6C62C674984974FCCB1D";
471 +
472          /* class: the class the oper joins when they successfully /oper */
473          class = "opers";
474  
# Line 466 | Line 479 | operator {
479           *
480           * +b - bots         - See bot and drone flooding notices
481           * +c - cconn        - Client connection/quit notices
469         * +C - cconn_full   - Client connection/quit notices full
482           * +D - deaf         - Don't receive channel messages
483           * +d - debug        - See debugging notices
484           * +e - external     - See remote server connection and split notices
# Line 488 | Line 500 | operator {
500           * +y - spy          - See LINKS, STATS, TRACE notices etc.
501           * +z - operwall     - See oper generated WALLOPS
502           */
503 < #       umodes = locops, servnotice, operwall, wallop;
503 >        umodes = locops, servnotice, operwall, wallop;
504  
505          /*
506           * privileges: controls the activities and commands an oper is
# Line 597 | Line 609 | connect {
609           * Multiple ciphers are separated by colons. The order of preference
610           * is from left to right.
611           */
612 <        #ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
612 > #       ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
613 >
614 >        /*
615 >         * fingerprint: enhances security by additionally checking the server's
616 >         * client certificate fingerprint against the specified fingerprint
617 >         * below.
618 >         */
619 > #       fingerprint = "4C62287BA6776A89CD4F8FF10A62FFB35E79319F51AF6C62C674984974FCCB1D";
620  
621          /*
622           * autoconn   - controls whether we autoconnect to this server or not,
# Line 849 | Line 868 | channel {
868   */
869   serverhide {
870          /*
871 +         * disable_remote_commands: disable users doing commands
872 +         * on remote servers.
873 +         */
874 +        disable_remote_commands = no;
875 +
876 +        /*
877           * flatten_links: this option will show all servers in /links appear
878           * that they are linked to this current server.
879           */
# Line 969 | Line 994 | general {
994           */
995          disable_auth = no;
996  
972        /* disable_remote_commands: disable users doing commands on remote servers. */
973        disable_remote_commands = no;
974
997          /*
998           * tkline_expire_notices: enables or disables temporary kline/xline
999           * expire notices.
# Line 1133 | Line 1155 | general {
1155           *
1156           * +b - bots         - See bot and drone flooding notices
1157           * +c - cconn        - Client connection/quit notices
1136         * +C - cconn_full   - Client connection/quit notices full
1158           * +D - deaf         - Don't receive channel messages
1159           * +d - debug        - See debugging notices
1160           * +e - external     - See remote server connection and split notices
# Line 1157 | Line 1178 | general {
1178           */
1179  
1180          /* oper_only_umodes: usermodes only opers may set */
1181 <        oper_only_umodes = bots, cconn, cconn_full, debug, full, hidden, skill,
1181 >        oper_only_umodes = bots, cconn, debug, full, hidden, skill,
1182                             nchange, rej, spy, external, operwall,
1183                             locops, unauth, farconnect;
1184  
# Line 1195 | Line 1216 | modules {
1216          path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload";
1217  
1218          /* module: the name of a module to load on startup/rehash. */
1219 <        #module = "some_module.la";
1219 > #       module = "some_module.la";
1220   };
1221  
1222   /*
# Line 1207 | Line 1228 | log {
1228  
1229          file {
1230                  type = oper;
1231 <                name = "/home/ircd/var/log/oper.log";
1231 >                name = "/usr/local/ircd/var/log/oper.log";
1232                  size = unlimited;
1233          };
1234  
1235          file {
1236                  type = user;
1237 <                name = "/home/ircd/var/log/user.log";
1237 >                name = "/usr/local/ircd/var/log/user.log";
1238                  size = 50 megabytes;
1239          };
1240  
1241          file {
1242                  type = kill;
1243 <                name = "/home/ircd/var/log/kill.log";
1243 >                name = "/usr/local/ircd/var/log/kill.log";
1244                  size = 50 megabytes;
1245          };
1246  
1247          file {
1248                  type = kline;
1249 <                name = "/home/ircd/var/log/kline.log";
1249 >                name = "/usr/local/ircd/var/log/kline.log";
1250                  size = 50 megabytes;
1251          };
1252  
1253          file {
1254                  type = dline;
1255 <                name = "/home/ircd/var/log/dline.log";
1255 >                name = "/usr/local/ircd/var/log/dline.log";
1256                  size = 50 megabytes;
1257          };
1258  
1259          file {
1260                  type = gline;
1261 <                name = "/home/ircd/var/log/gline.log";
1261 >                name = "/usr/local/ircd/var/log/gline.log";
1262                  size = 50 megabytes;
1263          };
1264  
1265          file {
1266                  type = debug;
1267 <                name = "/home/ircd/var/log/debug.log";
1267 >                name = "/usr/local/ircd/var/log/debug.log";
1268                  size = 50 megabytes;
1269          };
1270   };

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)