ViewVC Help

View File | Revision Log | Show Annotations | View Changeset | Root Listing

root/svn/ircd-hybrid/trunk/doc/reference.conf

Comparing ircd-hybrid/trunk/doc/reference.conf (file contents):
Revision 2322 by michael, Sun Jun 23 12:01:30 2013 UTC vs.
Revision 3869 by michael, Thu Jun 5 22:19:27 2014 UTC

#	Line 1 | Line 1
1	<	/* ircd-hybrid reference configuration file
2	<	* Copyright (C) 2000-2013 Hybrid Development Team
1	>	/*
2	>	* This is an example configuration file for ircd-hybrid
3		*
4	<	* Written by ejb, wcampbel, db, leeh and others
4	>	* Copyright (c) 2000-2014 ircd-hybrid development team
5		*
6		* $Id$
7		*/
#	Line 23 | Line 23
23		*
24		* Times/durations are written as:
25		*        12 hours 30 minutes 1 second
26	<	*
26	>	*
27		* Valid units of time:
28		*        year, month, week, day, hour, minute, second
29		*
#	Line 39 | Line 39
39		*/
40		serverinfo {
41		/*
42	<	* name: the name of this server.  This cannot be changed at runtime.
42	>	* name: the name of this server. This cannot be changed at runtime.
43		*/
44		name = "hades.arpa";
45
46		/*
47	<	* sid: a server's unique ID.  This is three characters long and must
48	<	* be in the form [0-9][A-Z0-9][A-Z0-9].  The first character must be
47	>	* sid: a server's unique ID. This is three characters long and must
48	>	* be in the form [0-9][A-Z0-9][A-Z0-9]. The first character must be
49		* a digit, followed by 2 alpha-numerical letters.
50	+	*
51		* NOTE: The letters must be capitalized. This cannot be changed at runtime.
52		*/
53		sid = "0HY";
#	Line 99 | Line 100 | serverinfo {
100
101		/*
102		* rsa_private_key_file: the path to the file containing the
103	<	* RSA key for cryptlink.
103	>	* RSA key.
104		*
105	<	* Example commands to store a 2048 bit RSA keypair in
105	<	* rsa.key, and the public key in rsa.pub:
105	>	* Example commands to store a 2048 bit RSA key in rsa.key:
106		*
107		*      openssl genrsa -out rsa.key 2048
108	<	*      openssl rsa -in rsa.key -pubout -out rsa.pub
109	<	*      chown <ircd-user>.<ircd.group> rsa.key rsa.pub
108	>	*      chown <ircd-user>.<ircd.group> rsa.key
109		*      chmod 0600 rsa.key
111	–	*      chmod 0644 rsa.pub
110		*/
111		#       rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
112
#	Line 143 | Line 141 | serverinfo {
141		*
142		* A DH parameter file can be created by running:
143		*
144	<	*      openssl dhparam -out dhparam.pem 1024
144	>	*      openssl dhparam -out dhparam.pem 2048
145		*
146		* Prime size must be at least 1024 bits. Further information
147		* regarding specific OpenSSL dhparam command-line options
#	Line 167 | Line 165 | serverinfo {
165		* Multiple ciphers are separated by colons. The order of preference is
166		* from left to right.
167		*/
168	<	#       ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
168	>	#       ssl_cipher_list = "ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA:AES256-SHA";
169
170		/*
171		* ssl_server_method:
#	Line 298 | Line 296 | class {
296		motd {
297		/*
298		* mask: multiple mask entries are permitted. Mask can either be
299	<	* a class name or a hostname.
299	>	* a class name or a hostname. CIDR is supported.
300		*/
301		mask = "*.at";
302		mask = "*.de";
#	Line 315 | Line 313 | motd {
313		*/
314		listen {
315		/*
316	<	* port: the port to listen on. If no host is specified
317	<	* earlier in the listen {} block, it will listen on all available IPs.
316	>	* port: the port to listen on. If no host is specified earlier
317	>	* in the listen {} block, it will listen on all available IPs.
318		*
319	<	* Ports are separated by commsa; a range may be specified using ".."
319	>	* Ports are separated by commas; a range may be specified using ".."
320		*/
321	<
321	>
322		/* port: listen on all available IP addresses, ports 6665 to 6669 */
323		port = 6665 .. 6669;
324
#	Line 407 | Line 405 | auth {
405		*/
406		redirserv = "this.is.not.a.real.server";
407		redirport = 6667;
408	<
408	>
409		user = "*.server";
410
411		/* class: a class is required even though it is not used */
#	Line 428 | Line 426 | operator {
426		name = "sheep";
427
428		/*
429	<	* user: the user@host required for this operator. Multiple
430	<	* user="" lines are supported.
429	>	* user: the user@host required for this operator. Multiple user
430	>	* lines are permitted within each operator block.
431		*/
432		user = "*sheep@192.168.0.0/16";
433		user = "*@127.0.0.0/8";
#	Line 452 | Line 450 | operator {
450
451		/*
452		* rsa_public_key_file: the public key for this oper when using Challenge.
453	<	* A password should not be defined when this is used; see
453	>	* A password should not be defined when this is used; see
454		* doc/challenge.txt for more information.
455		*/
456		#       rsa_public_key_file = "/usr/local/ircd/etc/oper.pub";
#	Line 499 | Line 497 | operator {
497		* +k - skill        - See server generated KILL messages
498		* +l - locops       - See LOCOPS messages
499		* +n - nchange      - See client nick changes
500	+	* +p - hidechans    - Hides channel list in WHOIS
501	+	* +q - hideidle     - Hides idle and signon time in WHOIS
502		* +R - nononreg     - Only receive private messages from registered clients
503		* +s - servnotice   - See general server notices
504		* +u - unauth       - See unauthorized client notices
505		* +w - wallop       - See server generated WALLOPS
506		* +y - spy          - See LINKS, STATS, TRACE notices etc.
507	–	* +z - operwall     - See oper generated WALLOPS
507		*/
508	<	umodes = locops, servnotice, operwall, wallop;
508	>	umodes = locops, servnotice, wallop;
509
510		/*
511		* privileges: controls the activities and commands an oper is
#	Line 527 | Line 526 | operator {
526		* unkline        - allows UNKLINE                    | ('U' flag)
527		* gline          - allows GLINE                      | ('G' flag)
528		* xline          - allows XLINE                      | ('X' flag)
529	+	* unxline        - allows UNXLINE                    |
530		* locops         - allows LOCOPS                     |
531		* globops        - allows GLOBOPS                    |
532		* wallops        - allows WALLOPS                    |
533	–	* operwall       - allows OPERWALL                   | ('L' flag)
533		* rehash         - allows oper to REHASH config      | ('H' flag)
534		* die            - allows DIE                        | ('D' flag)
535		* restart        - allows RESTART                    |
#	Line 538 | Line 537 | operator {
537		* admin          - gives administrator privileges    | ('A' flag)
538		*/
539		flags = kill, kill:remote, connect, connect:remote, kline, unkline,
540	<	xline, globops, restart, die, rehash, admin, operwall, module;
540	>	xline, globops, restart, die, rehash, admin, module;
541		};
542
543		/*
#	Line 616 | Line 615 | connect {
615		* Multiple ciphers are separated by colons. The order of preference
616		* is from left to right.
617		*/
618	<	#       ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
618	>	#       ssl_cipher_list = "ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA:AES256-SHA";
619
620		/*
621		* ssl_certificate_fingerprint: enhances security by additionally checking
#	Line 751 | Line 750 | exempt {
750		* resv {}:  nicks and channels users may not use/join
751		*/
752		resv { mask = "clone*"; reason = "Clone bots"; };
753	+	resv { mask = "Global"; reason = "Reserved for services"; };
754		resv { mask = "ChanServ"; reason = "Reserved for services"; };
755		resv { mask = "NickServ"; reason = "Reserved for services"; };
756		resv { mask = "OperServ"; reason = "Reserved for services"; };
#	Line 767 | Line 767 | resv {
767		* as channel name masks.
768		*/
769		mask = "#helsinki";
770	<	reason = "Channel is reserved for finnish inhabitants";
770	>	reason = "Channel is reserved for Finnish inhabitants";
771
772		/*
773		* exempt: can be either a ISO 3166 alpha-2 two letter country
#	Line 810 | Line 810 | channel {
810		disable_fake_channels = yes;
811
812		/*
813	<	* knock_delay: The amount of time a user must wait between issuing
814	<	* the knock command.
813	>	* invite_client_count, invite_client_time: how many INVITE commands
814	>	* are permitted per client per invite_client_time.
815		*/
816	<	knock_delay = 5 minutes;
816	>	invite_client_count = 10;
817	>	invite_client_time = 5 minutes;
818
819		/*
820	<	* knock_delay_channel: How often a knock to any specific channel
821	<	* is permitted, regardless of the user sending the knock.
820	>	* knock_client_count, knock_client_time: how many KNOCK commands
821	>	* are permitted per client per knock_client_time.
822	>	*/
823	>	knock_client_count = 1;
824	>	knock_client_time = 5 minutes;
825	>
826	>	/*
827	>	* knock_delay_channel: How often a KNOCK to any specific channel
828	>	* is permitted, regardless of the user sending the KNOCK.
829		*/
830		knock_delay_channel = 1 minute;
831
#	Line 850 | Line 858 | channel {
858		*
859		* Either split users or split servers can activate splitmode, but
860		* both conditions must be met for the ircd to deactivate splitmode.
861	<	*
861	>	*
862		* You may force splitmode to be permanent by /quote set splitmode on
863		*/
864
#	Line 949 | Line 957 | general {
957		services_name = "service.someserver";
958
959		/* max_watch: maximum WATCH entries a client can have. */
960	<	max_watch = 60;
960	>	max_watch = 50;
961
962		/* gline_enable: enable glines (network-wide temporary klines). */
963		gline_enable = yes;
#	Line 979 | Line 987 | general {
987		gline_min_cidr6 = 48;
988
989		/*
990	<	* Whether to automatically set mode +i on connecting users.
990	>	* invisible_on_connect: whether to automatically set mode +i on
991	>	* connecting users.
992		*/
993		invisible_on_connect = yes;
994
#	Line 989 | Line 998 | general {
998		* automatically to the new nick. kill_chase_time_limit is the maximum
999		* time following a nickname change that this chasing will apply.
1000		*/
1001	<	kill_chase_time_limit = 90 seconds;
1001	>	kill_chase_time_limit = 30 seconds;
1002
1003		/*
1004		* hide_spoof_ips: if disabled, opers will be allowed to see the real
#	Line 1052 | Line 1061 | general {
1061		min_nonwildcard_simple = 3;
1062
1063		/* max_accept: maximum allowed /accept's for +g usermode. */
1064	<	max_accept = 20;
1064	>	max_accept = 50;
1065
1066		/* anti_nick_flood: enable the nickflood control code. */
1067		anti_nick_flood = yes;
#	Line 1072 | Line 1081 | general {
1081		* a warning is given, or before the link is dropped. All servers
1082		* should run ntpdate/rdate to keep clocks in sync
1083		*/
1084	<	ts_warn_delta = 30 seconds;
1085	<	ts_max_delta = 5 minutes;
1084	>	ts_warn_delta = 10 seconds;
1085	>	ts_max_delta = 2 minutes;
1086
1087		/*
1088	<	* warn_no_nline: warn opers about servers that try to connect but
1089	<	* for which we don't have a connect {} block. Twits with misconfigured
1090	<	* servers can become really annoying with this enabled.
1088	>	* warn_no_connect_block: warn opers about servers that try to connect
1089	>	* but for which we don't have a connect {} block. Twits with
1090	>	* misconfigured servers can become really annoying with this enabled.
1091		*/
1092	<	warn_no_nline = yes;
1092	>	warn_no_connect_block = yes;
1093
1094		/*
1095		* stats_e_disabled: set this to 'yes' to disable "STATS e" for both
#	Line 1100 | Line 1109 | general {
1109		stats_u_oper_only = no;
1110
1111		/*
1112	<	* stats i oper only: make stats i (auth {}) oper only. Set to:
1112	>	* stats_i_oper_only: make stats i (auth {}) oper only. Set to:
1113		*     yes    - show users no auth blocks, made oper only.
1114		*     masked - show users the first matching auth block
1115		*     no     - show users all auth blocks.
#	Line 1130 | Line 1139 | general {
1139		/*
1140		* pace_wait_simple: minimum time required between use of less
1141		* intensive commands
1142	<	* (ADMIN, HELP, (L)USERS, VERSION, remote WHOIS)
1142	>	* (ADMIN, HELP, LUSERS, VERSION, remote WHOIS)
1143		*/
1144		pace_wait_simple = 1 second;
1145
1146		/*
1147		* pace_wait: minimum time required between use of more intensive commands
1148	<	* (AWAY, INFO, LINKS, MAP, MOTD, STATS, WHO, wildcard WHOIS, WHOWAS)
1148	>	* (AWAY, INFO, LINKS, MAP, MOTD, STATS, WHO, WHOWAS)
1149		*/
1150		pace_wait = 10 seconds;
1151
#	Line 1164 | Line 1173 | general {
1173		/* oper_pass_resv: allow opers to over-ride RESVs on nicks/channels. */
1174		oper_pass_resv = yes;
1175
1176	<	/* REMOVE ME.  The following line checks that you have been reading. */
1176	>	/* REMOVE ME. The following line checks that you have been reading. */
1177		havent_read_conf = 1;
1178
1179		/*
#	Line 1186 | Line 1195 | general {
1195		* +G - softcallerid - Server Side Ignore for users not on your channels
1196		* +g - callerid     - Server Side Ignore (for privmsgs etc)
1197		* +H - hidden       - Hides operator status to other users
1198	<	* +i - invisible    - Not shown in NAMES or WHO unless you share a
1190	<	*                     a channel
1198	>	* +i - invisible    - Not shown in NAMES or WHO unless you share a channel
1199		* +j - rej          - See rejected client notices
1200		* +k - skill        - See server generated KILL messages
1201		* +l - locops       - See LOCOPS messages
1202		* +n - nchange      - See client nick changes
1203	+	* +p - hidechans    - Hides channel list in WHOIS
1204	+	* +q - hideidle     - Hides idle and signon time in WHOIS
1205		* +R - nononreg     - Only receive private messages from registered clients
1206		* +s - servnotice   - See general server notices
1207		* +u - unauth       - See unauthorized client notices
1208		* +w - wallop       - See server generated WALLOPS
1209		* +y - spy          - See LINKS, STATS, TRACE notices etc.
1200	–	* +z - operwall     - See oper generated WALLOPS
1210		*/
1211
1212		/* oper_only_umodes: usermodes only opers may set */
1213		oper_only_umodes = bots, cconn, debug, full, hidden, skill,
1214	<	nchange, rej, spy, external, operwall,
1215	<	locops, unauth, farconnect;
1214	>	nchange, rej, spy, external,
1215	>	locops, unauth, farconnect;
1216
1217		/* oper_umodes: default usermodes opers get when they /oper */
1218	<	oper_umodes = bots, locops, servnotice, operwall, wallop;
1218	>	oper_umodes = bots, locops, servnotice, wallop;
1219
1220		/*
1221		* use_egd: if your system does not have *random devices yet you
#	Line 1228 | Line 1237 | general {
1237		* Offers protection against flooders who reconnect quickly.
1238		* Set to 0 to disable.
1239		*/
1240	<	throttle_time = 10;
1240	>	throttle_time = 10 seconds;
1241		};
1242
1243		modules {
#	Line 1286 | Line 1295 | log {
1295		size = 50 megabytes;
1296		};
1297
1298	+	file {
1299	+	type = xline;
1300	+	name = "/usr/local/ircd/var/log/xline.log";
1301	+	size = 50 megabytes;
1302	+	};
1303	+
1304	+	file {
1305	+	type = resv;
1306	+	name = "/usr/local/ircd/var/log/resv.log";
1307	+	size = 50 megabytes;
1308	+	};
1309	+
1310		file {
1311		type = debug;
1312		name = "/usr/local/ircd/var/log/debug.log";

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines (old)
>	Changed lines (new)