| 1 |
|
/* doc/example.conf - ircd-hybrid-7 Example configuration file |
| 2 |
< |
* Copyright (C) 2000-2006 Hybrid Development Team |
| 2 |
> |
* Copyright (C) 2000-2011 Hybrid Development Team |
| 3 |
|
* |
| 4 |
|
* Written by ejb, wcampbel, db, leeh and others |
| 5 |
|
* Other example configurations can be found in the source dir under |
| 43 |
|
*/ |
| 44 |
|
serverinfo { |
| 45 |
|
/* |
| 46 |
< |
* name: the name of our server. This cannot be changed at runtime. |
| 46 |
> |
* name: the name of this server. This cannot be changed at runtime. |
| 47 |
|
*/ |
| 48 |
|
name = "hades.arpa"; |
| 49 |
|
|
| 76 |
|
|
| 77 |
|
/* |
| 78 |
|
* vhost: the IP to bind to when we connect outward to ipv4 servers. |
| 79 |
< |
* This should be an ipv4 IP only, or "* for INADDR_ANY. |
| 79 |
> |
* This should be an ipv4 IP only, or "*" for INADDR_ANY. |
| 80 |
|
*/ |
| 81 |
|
#vhost = "192.169.0.1"; |
| 82 |
|
|
| 83 |
|
/* |
| 84 |
|
* vhost6: the IP to bind to when we connect outward to ipv6 servers. |
| 85 |
< |
* This should be an ipv6 IP only, or "* for INADDR_ANY. |
| 85 |
> |
* This should be an ipv6 IP only, or "*" for INADDR_ANY. |
| 86 |
|
*/ |
| 87 |
|
#vhost6 = "3ffe:80e8:546::2"; |
| 88 |
|
|
| 106 |
|
|
| 107 |
|
/* |
| 108 |
|
* ssl_certificate_file: the path to the file containing our |
| 109 |
< |
* ssl certificate |
| 110 |
< |
* for encrypted client connection. |
| 109 |
> |
* ssl certificate for encrypted client connection. |
| 110 |
|
* |
| 111 |
|
* This assumes your private RSA key is stored in rsa.key. You |
| 112 |
|
* MUST have an RSA key in order to generate the certificate |
| 123 |
|
* E-mail: you@domain.com |
| 124 |
|
*/ |
| 125 |
|
#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem"; |
| 126 |
+ |
|
| 127 |
+ |
/* |
| 128 |
+ |
* ssl_server_protocol: |
| 129 |
+ |
* SSL/TLS protocols we provide for incoming secure connections. |
| 130 |
+ |
* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1. |
| 131 |
+ |
* SSLv2 is not suppported. This cannot be changed at runtime. |
| 132 |
+ |
*/ |
| 133 |
+ |
#ssl_server_protocol = sslv3, tlsv1; |
| 134 |
|
}; |
| 135 |
|
|
| 136 |
|
/* |
| 331 |
|
* resv_exempt: exempt this user from resvs ('$' prefix on /stats I) |
| 332 |
|
* no_tilde: remove ~ from a user with no ident ('-' prefix on /stats I) |
| 333 |
|
* can_flood: allow this user to exceed flood limits ('|' prefix on /stats I) |
| 327 |
– |
* can_idle: exempt this user from idle restrictions ('<' prefix on /stats I) |
| 334 |
|
*/ |
| 335 |
|
flags = need_password, spoof_notice, exceed_limit, kline_exempt, |
| 336 |
< |
gline_exempt, resv_exempt, no_tilde, can_flood, can_idle; |
| 336 |
> |
gline_exempt, resv_exempt, no_tilde, can_flood; |
| 337 |
|
}; |
| 338 |
|
|
| 339 |
|
auth { |
| 377 |
|
|
| 378 |
|
/* |
| 379 |
|
* password: the password required to oper. By default this will |
| 380 |
< |
* need to be encrypted using 'mkpasswd'. MD5 is supported. |
| 380 |
> |
* need to be encrypted by using the provided mkpasswd tool. |
| 381 |
> |
* Several password hash algorithms are available depending |
| 382 |
> |
* on your system's crypt() implementation. For example, a modern |
| 383 |
> |
* glibc already has support for SHA-256/512, and MD5 encryption |
| 384 |
> |
* algorithms. |
| 385 |
|
*/ |
| 386 |
< |
password = "etcnjl8juSU1E"; |
| 386 |
> |
password = "$5$x5zof8qe.Yc7/bPp$5zIg1Le2Lsgd4CvOjaD20pr5PmcfD7ha/9b2.TaUyG4"; |
| 387 |
|
|
| 388 |
|
/* |
| 389 |
|
* encrypted: controls whether the oper password above has been |
| 390 |
< |
* encrypted. (OLD CRYPT_OPER_PASSWORD now optional per operator) |
| 390 |
> |
* encrypted. |
| 391 |
|
*/ |
| 392 |
|
encrypted = yes; |
| 393 |
|
|
| 452 |
|
* hidden_admin: same as 'admin', but noone can recognize you as |
| 453 |
|
* being an admin |
| 454 |
|
* hidden_oper: not shown in /stats p (except for other operators) |
| 445 |
– |
*/ |
| 446 |
– |
/* You can either use |
| 447 |
– |
* die = yes; |
| 448 |
– |
* rehash = yes; |
| 455 |
|
* |
| 456 |
< |
* or in a flags statement i.e. |
| 451 |
< |
* flags = die, rehash; |
| 452 |
< |
* |
| 453 |
< |
* You can also negate a flag with ~ i.e. |
| 456 |
> |
* A flag can be negated with ~ i.e. |
| 457 |
|
* flags = ~remote; |
| 455 |
– |
* |
| 458 |
|
*/ |
| 459 |
|
flags = global_kill, remote, kline, unkline, xline, |
| 460 |
|
die, rehash, nick_changes, admin, operwall; |
| 461 |
|
}; |
| 462 |
|
|
| 463 |
+ |
service { |
| 464 |
+ |
name = "service.someserver"; |
| 465 |
+ |
name = "stats.someserver; |
| 466 |
+ |
}; |
| 467 |
+ |
|
| 468 |
|
/* |
| 469 |
|
* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) |
| 470 |
|
*/ |
| 494 |
|
|
| 495 |
|
/* |
| 496 |
|
* encrypted: controls whether the accept_password above has been |
| 497 |
< |
* encrypted. (OLD CRYPT_LINK_PASSWORD now optional per connect) |
| 497 |
> |
* encrypted. |
| 498 |
|
*/ |
| 499 |
|
encrypted = no; |
| 500 |
|
|
| 513 |
|
*/ |
| 514 |
|
# leaf_mask = "*.uk"; |
| 515 |
|
|
| 509 |
– |
/* fakename: the servername we pretend to be when we connect */ |
| 510 |
– |
# fakename = "*.arpa"; |
| 511 |
– |
|
| 516 |
|
/* class: the class this server is in */ |
| 517 |
|
class = "server"; |
| 518 |
|
|
| 702 |
|
*/ |
| 703 |
|
resv { |
| 704 |
|
/* reason: the reason for the proceeding resv's */ |
| 705 |
< |
reason = "There are no services on this network"; |
| 705 |
> |
reason = "Reserved for services"; |
| 706 |
|
|
| 707 |
|
/* resv: the nicks and channels users may not join/use */ |
| 708 |
< |
nick = "nickserv"; |
| 709 |
< |
nick = "chanserv"; |
| 708 |
> |
nick = "NickServ"; |
| 709 |
> |
nick = "ChanServ"; |
| 710 |
> |
nick = "MemoServ"; |
| 711 |
> |
nick = "OperServ"; |
| 712 |
|
channel = "#services"; |
| 713 |
|
|
| 714 |
|
/* resv: wildcard masks are also supported in nicks only */ |
| 851 |
|
*/ |
| 852 |
|
default_split_server_count = 0; |
| 853 |
|
|
| 854 |
< |
/* split no create: disallow users creating channels on split. */ |
| 854 |
> |
/* no_create_on_split: disallow users creating channels on split. */ |
| 855 |
|
no_create_on_split = yes; |
| 856 |
|
|
| 857 |
< |
/* split: no join: disallow users joining channels at all on a split */ |
| 857 |
> |
/* no_join_on_split: disallow users joining channels at all on a split. */ |
| 858 |
|
no_join_on_split = no; |
| 859 |
|
}; |
| 860 |
|
|
| 918 |
|
* compiled in options in config.h. The general block is read at start time. |
| 919 |
|
*/ |
| 920 |
|
general { |
| 921 |
+ |
/* services_name: servername of nick/channel services */ |
| 922 |
+ |
services_name = "service.someserver"; |
| 923 |
+ |
|
| 924 |
|
/* max_watch: maximum WATCH entries a client can have. */ |
| 925 |
< |
max_watch = 64; |
| 925 |
> |
max_watch = 60; |
| 926 |
|
|
| 927 |
|
/* |
| 928 |
|
* gline_min_cidr: the minimum required length of a CIDR bitmask |
| 954 |
|
|
| 955 |
|
/* |
| 956 |
|
* Max time from the nickname change that still causes KILL |
| 957 |
< |
* automatically to switch for the current nick of that user. (seconds) |
| 957 |
> |
* automatically to switch for the current nick of that user. |
| 958 |
|
*/ |
| 959 |
< |
kill_chase_time_limit = 90; |
| 959 |
> |
kill_chase_time_limit = 90 seconds; |
| 960 |
|
|
| 961 |
|
/* |
| 962 |
|
* If hide_spoof_ips is disabled, opers will be allowed to see the real IP of spoofed |
| 1007 |
|
dots_in_ident = 2; |
| 1008 |
|
|
| 1009 |
|
/* |
| 1001 |
– |
* dot_in_ip6_addr: ircd-hybrid-6.0 and earlier will disallow hosts |
| 1002 |
– |
* without a '.' in them. This will add one to the end. Only needed |
| 1003 |
– |
* for older servers. |
| 1004 |
– |
*/ |
| 1005 |
– |
dot_in_ip6_addr = no; |
| 1006 |
– |
|
| 1007 |
– |
/* |
| 1010 |
|
* min_nonwildcard: the minimum non wildcard characters in k/d/g lines |
| 1011 |
|
* placed via the server. klines hand placed are exempt from limits. |
| 1012 |
|
* wildcard chars: '.' ':' '*' '?' '@' '!' '#' |
| 1146 |
|
/* oper_pass_resv: allow opers to over-ride RESVs on nicks/channels */ |
| 1147 |
|
oper_pass_resv = yes; |
| 1148 |
|
|
| 1147 |
– |
/* |
| 1148 |
– |
* idletime: the maximum amount of time a user may idle before |
| 1149 |
– |
* they are disconnected |
| 1150 |
– |
*/ |
| 1151 |
– |
idletime = 0; |
| 1152 |
– |
|
| 1149 |
|
/* REMOVE ME. The following line checks you've been reading. */ |
| 1150 |
|
havent_read_conf = 1; |
| 1151 |
|
|
| 1174 |
|
* |
| 1175 |
|
* +b - bots - See bot and drone flooding notices |
| 1176 |
|
* +c - cconn - Client connection/quit notices |
| 1177 |
< |
* +C - cconn - Client connection/quit notices full |
| 1177 |
> |
* +C - cconn_full - Client connection/quit notices full |
| 1178 |
|
* +D - deaf - Don't receive channel messages |
| 1179 |
|
* +d - debug - See debugging notices |
| 1180 |
|
* +f - full - See I: line full notices |
| 1294 |
|
* path: other paths to search for modules specified below |
| 1295 |
|
* and in /modload. |
| 1296 |
|
*/ |
| 1297 |
< |
path = "@LIBDIR@/modules"; |
| 1298 |
< |
path = "@LIBDIR@/modules/autoload"; |
| 1297 |
> |
path = "/usr/local/ircd/lib/ircd-hybrid/modules"; |
| 1298 |
> |
path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload"; |
| 1299 |
|
|
| 1300 |
|
/* module: the name of a module to load on startup/rehash */ |
| 1301 |
< |
#module = "some_module.so"; |
| 1301 |
> |
#module = "some_module.la"; |
| 1302 |
|
}; |