ViewVC Help

View File | Revision Log | Show Annotations | View Changeset | Root Listing

root/svn/ircd-hybrid/trunk/doc/reference.conf

Comparing ircd-hybrid/trunk/doc/reference.conf (file contents):
Revision 6609 by michael, Thu Oct 22 18:44:58 2015 UTC vs.
Revision 6668 by michael, Mon Oct 26 19:47:50 2015 UTC

#	Line 110 | Line 110 | serverinfo {
110		*
111		* Example commands to store a 2048 bit RSA key in rsa.key:
112		*
113	<	*      openssl genrsa -out rsa.key 2048
114	<	*      chown <ircd-user>.<ircd.group> rsa.key
115	<	*      chmod 0600 rsa.key
113	>	*    openssl genrsa -out rsa.key 2048
114	>	*    chown <ircd-user>.<ircd.group> rsa.key
115	>	*    chmod 0600 rsa.key
116		*/
117		#       rsa_private_key_file = "etc/rsa.key";
118
#	Line 125 | Line 125 | serverinfo {
125		*
126		* Example command:
127		*
128	<	*      openssl req -new -days 365 -x509 -key rsa.key -out cert.pem
128	>	*    openssl req -new -days 365 -x509 -key rsa.key -out cert.pem
129		*
130		* Please use the following values when generating the cert
131		*
132	<	*      Organization Name: Network Name
133	<	*      Organization Unit Name: unit.example.net
134	<	*      Common Name: irc.example.net
135	<	*      E-mail: email@example.net
132	>	*    Organization Name: Network Name
133	>	*    Organization Unit Name: unit.example.net
134	>	*    Common Name: irc.example.net
135	>	*    E-mail: email@example.net
136		*/
137		#       ssl_certificate_file = "etc/cert.pem";
138
#	Line 143 | Line 143 | serverinfo {
143		*
144		* A DH parameter file can be created by running:
145		*
146	<	*      openssl dhparam -out dhparam.pem 2048
146	>	*    openssl dhparam -out dhparam.pem 2048
147		*
148		* Prime size must be at least 1024 bits. Further information
149		* regarding specific OpenSSL dhparam command-line options
#	Line 158 | Line 158 | serverinfo {
158		*
159		* A list of supported curves by OpenSSL can be obtained by running:
160		*
161	<	*      openssl ecparam -list_curves
161	>	*    openssl ecparam -list_curves
162		*/
163		#       ssl_dh_elliptic_curve = "secp521r1";
164
#	Line 171 | Line 171 | serverinfo {
171		*
172		* A list of supported ciphers by OpenSSL can be obtained by running:
173		*
174	<	*      openssl ciphers -tls1 -v
174	>	*    openssl ciphers -tls1 -v
175		*
176		* Multiple ciphers are separated by colons. The order of preference is
177		* from left to right.
#	Line 185 | Line 185 | serverinfo {
185		*
186		* A list of supported message digest algorithms by OpenSSL can be obtained by running:
187		*
188	<	*      openssl list-message-digest-algorithms
188	>	*    openssl list-message-digest-algorithms
189		*/
190		#       ssl_message_digest_algorithm = "sha256";
191		};
#	Line 269 | Line 269 | class {
269		max_channels = 60;
270
271		/*
272	<	* min_idle: minimum idle time that is shown in /whois.
272	>	* min_idle: minimum idle time that is shown in WHOIS.
273		*/
274		min_idle = 3 hours;
275
276		/*
277	<	* max_idle: maximum idle time that is shown in /whois.
277	>	* max_idle: maximum idle time that is shown in WHOIS.
278		*/
279		max_idle = 8 hours;
280
#	Line 448 | Line 448 | operator {
448		user = "*@192.0.2.240/28";
449
450		/*
451	<	* password: the password required to oper. By default this will
452	<	* need to be encrypted by using the provided mkpasswd tool.
453	<	* Several password hash algorithms are available depending
454	<	* on your system's crypt() implementation. For example, a modern
455	<	* glibc already has support for the SHA-256/512 and MD5 encryption
456	<	* algorithms.
451	>	* password: the password required to oper. By default this will need
452	>	* to be encrypted by using the provided mkpasswd tool.
453	>	* The availability of various password hashing algorithms may vary
454	>	* depending on the system's crypt(3) implementation.
455		*/
456		password = "$5$x5zof8qe.Yc7/bPp$5zIg1Le2Lsgd4CvOjaD20pr5PmcfD7ha/9b2.TaUyG4";
457
#	Line 464 | Line 462 | operator {
462		encrypted = yes;
463
464		/*
467	–	* whois: allows to override the default RPL_WHOISOPERATOR numeric
468	–	* string shown in /whois.
469	–	* This string is propagated to all servers on the network.
470	–	*/
471	–	#       whois = "is a Smurf Target (IRC Operator)";
472	–
473	–	/*
465		* ssl_certificate_fingerprint: enhances security by additionally checking
466		* the oper's client certificate fingerprint against the specified
467		* fingerprint below.
#	Line 478 | Line 469 | operator {
469		* Hint: your users can use the following command to obtain a SHA-256 hash
470		* of their ssl certificate:
471		*
472	<	*      openssl x509 -sha256 -noout -fingerprint -in cert.pem | sed -e 's/^.*=//;s/://g'
472	>	*    openssl x509 -sha256 -noout -fingerprint -in cert.pem | sed -e 's/^.*=//;s/://g'
473		*/
474		#       ssl_certificate_fingerprint = "4C62287BA6776A89CD4F8FF10A62FFB35E79319F51AF6C62C674984974FCCB1D";
475
#	Line 489 | Line 480 | operator {
480		*/
481		ssl_connection_required = no;
482
483	<	/* class: the class the oper joins when they successfully /oper. */
483	>	/* class: the class the oper joins when they successfully OPER. */
484		class = "opers";
485
486		/*
487	<	* umodes: the default user modes opers get when they /oper.
487	>	* whois: allows to override the default RPL_WHOISOPERATOR numeric
488	>	* string shown in /whois.
489	>	* This string is propagated to all servers on the network.
490	>	*/
491	>	#       whois = "is a Smurf Target (IRC Operator)";
492	>
493	>	/*
494	>	* umodes: the default user modes opers get when they successfully OPER.
495		* If defined, it will override oper_umodes settings in general {}.
496		* Available user modes:
497		*
#	Line 1064 | Line 1062 | general {
1062		kline_min_cidr6 = 48;
1063
1064		/*
1065	<	* invisible_on_connect: whether to automatically set mode +i on
1066	<	* connecting users.
1065	>	* invisible_on_connect: whether to automatically set user mode +i
1066	>	* on connecting users.
1067		*/
1068		invisible_on_connect = yes;
1069
#	Line 1172 | Line 1170 | general {
1170		/*
1171		* stats_e_disabled: set this to 'yes' to disable "STATS e" for both
1172		* operators and administrators. Doing so is a good idea in case
1173	<	* there are any exempted (exempt {}) server IPs you don't want to
1174	<	* see leaked.
1173	>	* there are any exempted (exempt {}) server IP addresses you don't
1174	>	* want to see leaked.
1175		*/
1176		stats_e_disabled = no;
1177
#	Line 1279 | Line 1277 | general {
1277		*/
1278
1279		/* oper_only_umodes: user modes only operators may set. */
1280	<	oper_only_umodes = bots, cconn, debug, external, farconnect, full, hidden, locops,
1281	<	nchange, rej, skill, spy, unauth;
1280	>	oper_only_umodes = bots, cconn, debug, external, farconnect, full, hidden,
1281	>	locops, nchange, rej, skill, spy, unauth;
1282
1283	<	/* oper_umodes: default user modes operators get when they /oper. */
1283	>	/* oper_umodes: default user modes operators get when they successfully OPER. */
1284		oper_umodes = bots, locops, servnotice, wallop;
1285
1286		/*

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines (old)
>	Changed lines (new)