diff options
Diffstat (limited to 'network')
| -rw-r--r-- | network/elemental-ircd/README | 36 | ||||
| -rw-r--r-- | network/elemental-ircd/doinst.sh | 39 | ||||
| -rw-r--r-- | network/elemental-ircd/elemental-ircd.SlackBuild | 145 | ||||
| -rw-r--r-- | network/elemental-ircd/elemental-ircd.info | 10 | ||||
| -rw-r--r-- | network/elemental-ircd/elemental-ircd.logrotate | 15 | ||||
| -rw-r--r-- | network/elemental-ircd/rc.elemental-ircd | 53 | ||||
| -rw-r--r-- | network/elemental-ircd/slack-desc | 19 | ||||
| -rw-r--r-- | network/elemental-ircd/slackware.conf | 609 |
8 files changed, 926 insertions, 0 deletions
diff --git a/network/elemental-ircd/README b/network/elemental-ircd/README new file mode 100644 index 0000000000000..2603265d13804 --- /dev/null +++ b/network/elemental-ircd/README @@ -0,0 +1,36 @@ +Elemental-IRCd is a high performance, lightweight, and scalable IRC daemon. It +is a fork of the now-defunct ShadowIRCD and seeks to continue in the direction +ShadowIRCD was headed. + +An `/etc/rc.d/rc.elemental-ircd` script is supplied which supports +start/stop/restart/reload, which you can call from your rc.local: + + # /etc/rc.d/rc.local + # ================== + if [ -x /etc/rc.d/rc.elemental-ircd ]; then + /etc/rc.d/rc.elemental-ircd start + fi + +The `reload` parameter will make an already running ircd reload its +configuration file. + +The elemental-ircd will refuse to run as root, so you need to create a user +for it: + groupadd -g 315 elemental-ircd + useradd -u 315 -g 315 -d /var/lib/elemental-ircd elemental-ircd +By default we name the user `elemental-ircd` with UID 315, and put it in the +`elemental-ircd` group (GID 315). If you want to give it a different name, uid +or gid, you can give + IRCD_UNAME=elemental-ircd + IRCD_UID=315 + IRCD_GID=315 +different values when running the slackbuild script. + +Before starting the ircd, you'll need to create a configuration file for it. +It should be named `/etc/elemental-ircd/ircd.conf`. In that directory there +is already an `example.conf` and a `reference.conf`. + +Note: elemental-ircd comes with a binary called `/usr/bin/mkpasswd`, which is +used to create passwords for o-lines, but it creates a conflict with +`/usr/bin/mkpasswd` from expect, so the `mkpasswd` supplied by elemental-ircd +is renamed to `ircd-mkpasswd` by the SlackBuild script. diff --git a/network/elemental-ircd/doinst.sh b/network/elemental-ircd/doinst.sh new file mode 100644 index 0000000000000..e8bbf30335a8a --- /dev/null +++ b/network/elemental-ircd/doinst.sh @@ -0,0 +1,39 @@ + +IRCD_UNAME="@UNAME@" +IRCD_UID="@UID@" +IRCD_GID="@GID@" + +config() { + NEW="$1" + OLD="$(dirname $NEW)/$(basename $NEW .new)" + # If there's no config file by that name, mv it over: + if [ ! -r $OLD ]; then + mv $NEW $OLD + elif [ "$(cat $OLD | md5sum)" = "$(cat $NEW | md5sum)" ]; then # toss the redundant copy + rm $NEW + fi + # Otherwise, we leave the .new copy for the admin to consider... +} + +preserve_perms() { + NEW="$1" + OLD="$(dirname $NEW)/$(basename $NEW .new)" + if [ -e $OLD ]; then + cp -a $OLD ${NEW}.incoming + cat $NEW > ${NEW}.incoming + mv ${NEW}.incoming $NEW + fi + config $NEW +} + +preserve_perms etc/rc.d/rc.elemental-ircd.new +config etc/logrotate.d/elemental-ircd.new +config etc/elemental-ircd/ircd.motd.new + +# Set up user/group permissions +groupadd -g $IRCD_GID $IRCD_UNAME 2>/dev/null +useradd -u $IRCD_UID -g $IRCD_GID -d /var/lib/elemental-ircd $IRCD_UNAME 2>/dev/null +chown $IRCD_UID:$IRCD_GID /var/run/elemental-ircd +chown $IRCD_UID:$IRCD_GID /var/log/elemental-ircd +chown $IRCD_UID:$IRCD_GID /var/lib/elemental-ircd +chown $IRCD_UID:$IRCD_GID /var/state/elemental-ircd diff --git a/network/elemental-ircd/elemental-ircd.SlackBuild b/network/elemental-ircd/elemental-ircd.SlackBuild new file mode 100644 index 0000000000000..0b8876132dab4 --- /dev/null +++ b/network/elemental-ircd/elemental-ircd.SlackBuild @@ -0,0 +1,145 @@ +#!/bin/sh + +# Slackware build script for elemental-ircd + +# Copyright 2015 Andreas Guldstrand <andreas.guldstrand@gmail.com> +# Copyright 2007-2015 Adis Nezirovic <adis_at_linux.org.ba> for doinst.sh +# All rights reserved. +# +# Redistribution and use of this script, with or without modification, is +# permitted provided that the following conditions are met: +# +# 1. Redistributions of this script must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# +# THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO +# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, +# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, +# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; +# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR +# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF +# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +PRGNAM="elemental-ircd" +VERSION=${VERSION:-6.6.3} +BUILD=${BUILD:-1} +TAG=${TAG:-_SBo} + +IRCD_UID=${IRCD_UID:-315} +IRCD_GID=${IRCD_GID:-315} +IRCD_UNAME=${IRCD_UNAME:-elemental-ircd} + +if [ -z "$ARCH" ]; then + case "$( uname -m )" in + i?86) ARCH=i486 ;; + arm*) ARCH=arm ;; + *) ARCH=$( uname -m ) ;; + esac +fi + +CWD=$(pwd) +TMP=${TMP:-/tmp/SBo} +PKG=$TMP/package-$PRGNAM +OUTPUT=${OUTPUT:-/tmp} + +if [ "$ARCH" = "i486" ]; then + SLKCFLAGS="-O2 -march=i486 -mtune=i686" + LIBDIRSUFFIX="" +elif [ "$ARCH" = "i686" ]; then + SLKCFLAGS="-O2 -march=i686 -mtune=i686" + LIBDIRSUFFIX="" +elif [ "$ARCH" = "x86_64" ]; then + SLKCFLAGS="-O2 -fPIC" + LIBDIRSUFFIX="64" +else + SLKCFLAGS="-O2" + LIBDIRSUFFIX="" +fi + +set -e + +rm -rf $PKG +mkdir -p $TMP $PKG $OUTPUT +cd $TMP +rm -rf $PRGNAM-$PRGNAM-$VERSION +tar xvf $CWD/$PRGNAM-$VERSION.tar.gz +cd $PRGNAM-$PRGNAM-$VERSION +chown -R root:root . +find -L . \ + \( -perm 777 -o -perm 775 -o -perm 750 -o -perm 711 -o -perm 555 \ + -o -perm 511 \) -exec chmod 755 {} \; -o \ + \( -perm 666 -o -perm 664 -o -perm 640 -o -perm 600 -o -perm 444 \ + -o -perm 440 -o -perm 400 \) -exec chmod 644 {} \; + +CFLAGS="$SLKCFLAGS" \ +CXXFLAGS="$SLKCFLAGS" \ +./configure \ + --prefix=/usr \ + --libdir=/usr/lib${LIBDIRSUFFIX} \ + --sysconfdir=/etc/$PRGNAM \ + --localstatedir=/var/state \ + --mandir=/usr/man \ + --docdir=/usr/doc/$PRGNAM-$VERSION \ + --with-helpdir="/usr/doc/$PRGNAM-$VERSION/help" \ + --build=$ARCH-slackware-linux \ + --enable-ipv6 \ + --enable-epoll \ + --with-logdir="/var/log/$PRGNAM" \ + --with-rundir=/var/run + +make +make install DESTDIR=$PKG + +# /usr/bin/mkpasswd already exists in expect, so rename this one +mv $PKG/usr/bin/mkpasswd $PKG/usr/bin/ircd-mkpasswd + +# Rename /etc/elemental-ircd/ircd.motd to .new so we don't clobber it +mv $PKG/etc/$PRGNAM/ircd.motd $PKG/etc/$PRGNAM/ircd.motd.new + +find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" | grep ELF \ + | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true + +find $PKG/usr/man -type f -exec gzip -9 {} \; +for i in $( find $PKG/usr/man -type l ) ; do ln -s $( readlink $i ).gz $i.gz ; rm $i ; done + +mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION +cp -a \ + CONTRIBUTING.md CREDITS Dockerfile INSTALL LICENSE NEWS README.md TODO.markdown \ + doc/*.txt doc/example.conf doc/Hybrid-team doc/Ratbox-team doc/README.cidr_bans \ + doc/reference.charybdis.conf doc/reference.conf doc/server-version-info \ + doc/Tao-of-IRC.940110 doc/technical tools/README.mkpasswd \ + $PKG/usr/doc/$PRGNAM-$VERSION +cp -a extensions/README $PKG/usr/doc/$PRGNAM-$VERSION/README.extensions +cat $CWD/$PRGNAM.SlackBuild > $PKG/usr/doc/$PRGNAM-$VERSION/$PRGNAM.SlackBuild +cat $CWD/README > $PKG/usr/doc/$PRGNAM-$VERSION/README.SBo + +# Create /var/lib/elemental-ircd directory +mkdir -p $PKG/var/lib/$PRGNAM + +# Copy rc.elemental-ircd into /etc/rc.d +mkdir -p $PKG/etc/rc.d +sed -e "s/@USER@/$IRCD_UNAME/" $CWD/rc.$PRGNAM > $PKG/etc/rc.d/rc.$PRGNAM.new + +# Copy logrotate script into /etc/logrotate.d +mkdir -p $PKG/etc/logrotate.d +cat $CWD/$PRGNAM.logrotate > $PKG/etc/logrotate.d/$PRGNAM.new + +# Copy slackware-specific example conf to /etc/elemental-ircd +mkdir -p $PKG/etc/$PRGNAM +sed -e "s/@LIBDIRSUFFIX@/$LIBDIRSUFFIX/" \ + $CWD/slackware.conf > $PKG/etc/$PRGNAM/slackware.conf + +# Copy the slack-desc (and a custom doinst.sh if necessary) into ./install +mkdir -p $PKG/install +cat $CWD/slack-desc > $PKG/install/slack-desc +sed -e "s/@UNAME@/$IRCD_UNAME/" \ + -e "s/@UID@/$IRCD_UID/" \ + -e "s/@GID@/$IRCD_GID/" \ + $CWD/doinst.sh > $PKG/install/doinst.sh +chmod 755 $PKG/install/doinst.sh + +cd $PKG +/sbin/makepkg -l y -c n $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.${PKGTYPE:-tgz} diff --git a/network/elemental-ircd/elemental-ircd.info b/network/elemental-ircd/elemental-ircd.info new file mode 100644 index 0000000000000..404b9e465bcf4 --- /dev/null +++ b/network/elemental-ircd/elemental-ircd.info @@ -0,0 +1,10 @@ +PRGNAM="elemental-ircd" +VERSION="6.6.3" +HOMEPAGE="http://elemental-ircd.com/" +DOWNLOAD="https://github.com/Elemental-IRCd/elemental-ircd/archive/elemental-ircd-6.6.3.tar.gz" +MD5SUM="4e0aa3b2692252a6b467e07f1de8ab34" +DOWNLOAD_x86_64="" +MD5SUM_x86_64="" +REQUIRES="" +MAINTAINER="Andreas Guldstrand" +EMAIL="andreas.guldstrand@gmail.com" diff --git a/network/elemental-ircd/elemental-ircd.logrotate b/network/elemental-ircd/elemental-ircd.logrotate new file mode 100644 index 0000000000000..16c989becc462 --- /dev/null +++ b/network/elemental-ircd/elemental-ircd.logrotate @@ -0,0 +1,15 @@ +/var/log/elemental-ircd/* { + daily + rotate 7 + copytruncate + delaycompress + compress + notifempty + missingok + postrotate + if [ -x /etc/rc.d/rc.elemental-ircd ] + then + /etc/rc.d/rc.elemental-ircd reload > /dev/null 2>&1 + fi + endscript +} diff --git a/network/elemental-ircd/rc.elemental-ircd b/network/elemental-ircd/rc.elemental-ircd new file mode 100644 index 0000000000000..9af9f68ef975d --- /dev/null +++ b/network/elemental-ircd/rc.elemental-ircd @@ -0,0 +1,53 @@ +#!/bin/sh +# +# elemental-ircd startup script for Slackware + +USER="@USER@" +PIDFILE="/var/run/elemental-ircd/ircd.pid" +PID=`cat $PIDFILE 2>/dev/null` + +ircd_start() { + echo "Starting elemental-ircd." + su - $USER -c "/usr/bin/ircd -pidfile $PIDFILE" +} + +ircd_stop() { + echo -n "Stopping elemental-ircd..." + kill -TERM $PID 2>/dev/null + echo " done." +} + +ircd_reload() { + echo -n "Sending signal to elemental-ircd to reload its configuration..." + if kill -CHLD $PID 2>/dev/null; then + kill -HUP $PID + echo " done." + else + echo "ircd doesn't seem to be running." + exit 1 + fi +} + +ircd_restart() { + ircd_stop + sleep 1 + ircd_start +} + +case "$1" in + start) + ircd_start + ;; + stop) + ircd_stop + ;; + restart) + ircd_restart + ;; + reload) + ircd_reload + ;; + *) + echo "Usage: $0 {start|stop|restart|reload}" + exit 1 +esac diff --git a/network/elemental-ircd/slack-desc b/network/elemental-ircd/slack-desc new file mode 100644 index 0000000000000..8d84e8e549556 --- /dev/null +++ b/network/elemental-ircd/slack-desc @@ -0,0 +1,19 @@ +# HOW TO EDIT THIS FILE: +# The "handy ruler" below makes it easier to edit a package description. +# Line up the first '|' above the ':' following the base package name, and +# the '|' on the right side marks the last column you can put a character in. +# You must make exactly 11 lines for the formatting to be correct. It's also +# customary to leave one space after the ':' except on otherwise blank lines. + + |-----handy-ruler------------------------------------------------------| +elemental-ircd: elemental-ircd (high performance irc daemon) +elemental-ircd: +elemental-ircd: Elemental-IRCd is a high performance, lightweight, and scalable IRC +elemental-ircd: daemon. It is a fork of the now-defunct ShadowIRCD and seeks to +elemental-ircd: continue in the direction ShadowIRCD was headed. +elemental-ircd: +elemental-ircd: http://elemental-ircd.com/ +elemental-ircd: +elemental-ircd: +elemental-ircd: +elemental-ircd: diff --git a/network/elemental-ircd/slackware.conf b/network/elemental-ircd/slackware.conf new file mode 100644 index 0000000000000..fc9d8401ba789 --- /dev/null +++ b/network/elemental-ircd/slackware.conf @@ -0,0 +1,609 @@ +/* /etc/elemental-ircd/slackware.conf - brief example configuration file + * + * Copyright (C) 2000-2002 Hybrid Development Team + * Copyright (C) 2002-2005 ircd-ratbox development team + * Copyright (C) 2005-2006 charybdis development team + * Copyright (C) 2014 Elemental-IRCd development team + * + * $Id: example.conf 3582 2007-11-17 21:55:48Z jilles $ + * + * See reference.conf for more information. + */ + +/* Extensions */ +#loadmodule "extensions/chm_adminonly.so"; +loadmodule "extensions/chm_operonly.so"; +#loadmodule "extensions/chm_sslonly.so"; +#loadmodule "extensions/chm_operonly_compat.so"; +#loadmodule "extensions/chm_quietunreg_compat.so"; +#loadmodule "extensions/chm_sslonly_compat.so"; +#loadmodule "extensions/createauthonly.so"; +loadmodule "extensions/extb_account.so"; +loadmodule "extensions/extb_canjoin.so"; +loadmodule "extensions/extb_channel.so"; +loadmodule "extensions/extb_extgecos.so"; +loadmodule "extensions/extb_oper.so"; +loadmodule "extensions/extb_realname.so"; +#loadmodule "extensions/extb_server.so"; +#loadmodule "extensions/extb_ssl.so"; +#loadmodule "extensions/hurt.so"; +loadmodule "extensions/ip_cloaking.so"; +#loadmodule "extensions/m_findforwards.so"; +loadmodule "extensions/m_identify.so"; +loadmodule "extensions/m_mkpasswd.so"; +loadmodule "extensions/m_webirc.so"; +#loadmodule "extensions/m_cycle.so"; +#loadmodule "extensions/m_oaccept.so"; +#loadmodule "extensions/m_opme.so"; +#loadmodule "extensions/m_ojoin.so"; +#loadmodule "extensions/m_omode.so"; +#loadmodule "extensions/m_olist.so"; +#loadmodule "extensions/m_okick.so"; +#loadmodule "extensions/m_force.so"; +#loadmodule "extensions/m_roleplay.so"; +#loadmodule "extensions/no_oper_invis.so"; +loadmodule "extensions/sno_farconnect.so"; +loadmodule "extensions/sno_globalkline.so"; +loadmodule "extensions/sno_globaloper.so"; +#loadmodule "extensions/sno_whois.so"; + +serverinfo { + name = "hostname.domain.tld"; + sid = "42X"; + description = "elemental-ircd test server"; + network_name = "ShadowNET"; + network_desc = "Your IRC network."; + helpchan = "#help"; + helpurl = "http://www.mynet.net/help"; + hub = yes; + + /* On multi-homed hosts you may need the following. These define + * the addresses we connect from to other servers. */ + /* for IPv4 */ + #vhost = "192.169.0.1"; + /* for IPv6 */ + #vhost6 = "3ffe:80e8:546::2"; + + /* ssl_private_key: our ssl private key */ + ssl_private_key = "etc/ssl.key"; + + /* ssl_cert: certificate for our ssl server */ + ssl_cert = "etc/ssl.cert"; + + /* ssl_dh_params: DH parameters, generate with openssl dhparam -out dh.pem 1024 */ + ssl_dh_params = "etc/dh.pem"; + + /* ssld_count: number of ssld processes you want to start, if you + * have a really busy server, using N-1 where N is the number of + * cpu/cpu cores you have might be useful. A number greater than one + * can also be useful in case of bugs in ssld and because ssld needs + * two file descriptors per SSL connection. + */ + ssld_count = 1; + + /* default max clients: the default maximum number of clients + * allowed to connect. This can be changed once ircd has started by + * issuing: + * /quote set maxclients <limit> + */ + default_max_clients = 1024; +}; + +admin { + name = "Lazy admin (lazya)"; + description = "ShadowNET client server"; + email = "nobody@127.0.0.1"; +}; + +log { + fname_userlog = "/var/log/elemental-ircd/userlog"; + #fname_fuserlog = "/var/log/elemental-ircd/fuserlog"; + fname_operlog = "/var/log/elemental-ircd/operlog"; + #fname_foperlog = "/var/log/elemental-ircd/foperlog"; + fname_serverlog = "/var/log/elemental-ircd/serverlog"; + #fname_klinelog = "/var/log/elemental-ircd/klinelog"; + fname_killlog = "/var/log/elemental-ircd/killlog"; + fname_operspylog = "/var/log/elemental-ircd/operspylog"; + #fname_ioerrorlog = "/var/log/elemental-ircd/ioerror"; +}; + +/* class {} blocks MUST be specified before anything that uses them. That + * means they must be defined before auth {} and before connect {}. + */ +class "users" { + ping_time = 2 minutes; + number_per_ident = 10; + number_per_ip = 10; + number_per_ip_global = 50; + cidr_ipv4_bitlen = 24; + cidr_ipv6_bitlen = 64; + number_per_cidr = 200; + max_number = 3000; + sendq = 400 kbytes; +}; + +class "opers" { + ping_time = 5 minutes; + number_per_ip = 10; + max_number = 1000; + sendq = 1 megabyte; +}; + +class "server" { + ping_time = 5 minutes; + connectfreq = 5 minutes; + max_number = 1; + sendq = 4 megabytes; +}; + +listen { + /* defer_accept: wait for clients to send IRC handshake data before + * accepting them. if you intend to use software which depends on the + * server replying first, such as BOPM, you should disable this feature. + * otherwise, you probably want to leave it on. Disabling this will not + * update on a rehash. + */ + defer_accept = yes; + + /* If you want to listen on a specific IP only, specify host. + * host definitions apply only to the following port line. + */ + #host = "192.169.0.1"; + port = 5000, 6665 .. 6669; + sslport = 6697; + + /* Listen on IPv6 (if you used host= above). */ + #host = "3ffe:1234:a:b:c::d"; + #port = 5000, 6665 .. 6669; + #sslport = 9999; +}; + +/* auth {}: allow users to connect to the ircd (OLD I:) + * auth {} blocks MUST be specified in order of precedence. The first one + * that matches a user will be used. So place spoofs first, then specials, + * then general access, then restricted. + */ +auth { + /* user: the user@host allowed to connect. Multiple IPv4/IPv6 user + * lines are permitted per auth block. This is matched against the + * hostname and IP address (using :: shortening for IPv6 and + * prepending a 0 if it starts with a colon) and can also use CIDR + * masks. + */ + user = "*@172.16.0.0/12"; + user = "*test@123D:B567:*"; + + /* auth_user: The username (authenticated via SASL or PASS) allowed + * to connect. You are able to put multiple auth_user lines. If people + * are authenticating via SASL in this way, it is recommended to comment + * out the password option below. You will also *NEED* to specify a user + * line above auth_user, this can safely be "*@*", however. + */ + auth_user = "jilles"; + auth_user = "jdhore"; + + /* password: an optional password that is required to use this block. + * By default this is not encrypted, specify the flag "encrypted" in + * flags = ...; below if it is. + */ + password = "letmein"; + + /* spoof: fake the users user@host to be be this. You may either + * specify a host or a user@host to spoof to. This is free-form, + * just do everyone a favour and dont abuse it. (OLD I: = flag) + */ + spoof = "I.still.hate.packets"; + + /* autojoin: Channel (or channels, comma-seperated) to join users + * in this auth block to on connect. Note that this won't join + * the user through any bans or otherwise restrictive chmodes. + */ + autojoin = "#shadowircd,#test"; + + /* Possible flags in auth: + * + * encrypted | password is encrypted with mkpasswd + * spoof_notice | give a notice when spoofing hosts + * exceed_limit (old > flag) | allow user to exceed class user limits + * kline_exempt (old ^ flag) | exempt this user from k/g/xlines&dnsbls + * dnsbl_exempt | exempt this user from dnsbls + * spambot_exempt | exempt this user from spambot checks + * shide_exempt | exempt this user from serverhiding + * jupe_exempt | exempt this user from generating + * warnings joining juped channels + * resv_exempt | exempt this user from resvs + * flood_exempt | exempt this user from flood limits + * USE WITH CAUTION. + * no_tilde (old - flag) | don't prefix ~ to username if no ident + * need_ident (old + flag) | require ident for user in this class + * need_ssl | require SSL/TLS for user in this class + * need_sasl | require SASL id for user in this class + */ + flags = kline_exempt, exceed_limit; + + /* class: the class the user is placed in */ + class = "opers"; +}; + +/* Example WEBIRC authblock */ +auth { + /* user: webirc@IP.OF.YOUR.WEBIRC . the webirc@ part is required */ + user = "webirc@192.168.1.1"; + + /* password: password the webirc client sends in the WEBIRC command. + * You can use a encrypted password here (see above auth block). + */ + password = "<password>"; + + /* spoof: This is required to keep it what it is currently if you + * want the webirc client to show the users' real host as their + * host on IRC. + */ + spoof = "webirc."; + class = "users"; +}; + +auth { + user = "*@*"; + class = "users"; + flags = no_tilde; +}; + +/* privset {} blocks MUST be specified before anything that uses them. That + * means they must be defined before operator {}. + */ +privset "local_op" { + privs = oper:local_kill, oper:operwall; +}; + +privset "server_bot" { + extends = "local_op"; + privs = oper:kline, oper:remoteban, snomask:nick_changes; +}; + +privset "global_op" { + extends = "local_op"; + privs = oper:global_kill, oper:routing, oper:kline, oper:unkline, oper:xline, + oper:resv, oper:mass_notice, oper:remoteban; +}; + +privset "admin" { + extends = "global_op"; + privs = oper:admin, oper:die, oper:rehash, oper:spy, oper:override; +}; + +operator "god" { + /* name: the name of the oper must go above */ + + /* user: the user@host required for this operator. CIDR *is* + * supported now. auth{} spoofs work here, other spoofs do not. + * multiple user="" lines are supported. + */ + user = "*god@127.0.0.1"; + + /* password: the password required to oper. Unless ~encrypted is + * contained in flags = ...; this will need to be encrypted using + * mkpasswd, MD5 is supported + */ + password = "etcnjl8juSU1E"; + + /* rsa key: the public key for this oper when using Challenge. + * A password should not be defined when this is used, see + * doc/challenge.txt for more information. + */ + #rsa_public_key_file = "/usr/local/ircd/etc/oper.pub"; + + /* umodes: the specific umodes this oper gets when they oper. + * If this is specified an oper will not be given oper_umodes + * These are described above oper_only_umodes in general {}; + */ + #umodes = locops, servnotice, operwall, wallop; + + /* fingerprint: if specified, the oper's client certificate + * fingerprint will be checked against the specified fingerprint + * below. + */ + #fingerprint = "c77106576abf7f9f90cca0f63874a60f2e40a64b"; + + /* snomask: specific server notice mask on oper up. + * If this is specified an oper will not be given oper_snomask. + */ + snomask = "+Zbfkrsuy"; + + /* vhost: defines the vhost that this oper will get on oper up. + * this must be a valid hostmask. If this is specified the oper + * will not be given default_operhost. + */ + vhost = "is.an.oper"; + + /* swhois: defines an additional line that will be displayed + * whenever someone does /whois on the oper in question. + */ + swhois = "is wearing pants."; + + /* operstring: defines a custom operstring for this oper, + * which will be shown in whois instead of default_operstring + * or default_adminstring. + */ + operstring = "is a lazy IRC Operator"; + + /* flags: misc options for the operator. You may prefix an option + * with ~ to disable it, e.g. ~encrypted. + * + * Default flags are encrypted. + * + * Available options: + * + * encrypted: the password above is encrypted [DEFAULT] + * need_ssl: must be using SSL/TLS to oper up + */ + flags = encrypted; + + /* privset: privileges set to grant */ + privset = "admin"; +}; + +connect "irc.uplink.com" { + host = "192.168.0.1"; + send_password = "password"; + accept_password = "anotherpassword"; + port = 6666; + hub_mask = "*"; + class = "server"; + flags = compressed, topicburst; + + #fingerprint = "c77106576abf7f9f90cca0f63874a60f2e40a64b"; + + /* If the connection is IPv6, uncomment below. + * Use 0::1, not ::1, for IPv6 localhost. */ + #aftype = ipv6; +}; + +connect "ssl.uplink.com" { + host = "192.168.0.1"; + send_password = "password"; + accept_password = "anotherpassword"; + port = 9999; + hub_mask = "*"; + class = "server"; + flags = ssl, topicburst; +}; + +service { + name = "services.int"; +}; + +cluster { + name = "*"; + flags = kline, tkline, unkline, xline, txline, unxline, resv, tresv, unresv; +}; + +shared { + oper = "*@*", "*"; + flags = all; +}; + +/* exempt {}: IPs that are exempt from Dlines and rejectcache. (OLD d:) */ +exempt { + ip = "127.0.0.1"; +}; + +channel { + #disabledmodes = "ME"; + autochanmodes = "nt"; + admin_on_channel_create = no; + exemptchanops = "NT"; + use_halfop = yes; + use_admin = yes; + use_owner = yes; + use_knock = yes; + use_local_channels = yes; + knock_delay = 5 minutes; + knock_delay_channel = 1 minute; + max_chans_per_user = 15; + max_bans = 100; + max_bans_large = 500; + default_split_user_count = 0; + default_split_server_count = 0; + no_create_on_split = no; + no_join_on_split = no; + burst_topicwho = yes; + kick_on_split_riding = no; + only_ascii_channels = no; + cycle_host_change = yes; + host_in_topic = yes; + resv_forcepart = yes; + channel_target_change = yes; +}; + +serverhide { + flatten_links = yes; + links_delay = 5 minutes; + hidden = no; + disable_hidden = no; +}; + +/* These are the blacklist settings. + * You can have multiple combinations of host and rejection reasons. + * They are used in pairs of one host/rejection reason. + * + * These settings should be adequate for most networks, and are (presently) + * required for use on ShadowNet. + * + * Word to the wise: Do not use blacklists like SPEWS for blocking IRC + * connections. + * + * As of charybdis 2.1.3, you can do some keyword substitution on the rejection + * reason. The available keyword substitutions are: + * + * ${ip} - the user's IP + * ${host} - the user's canonical hostname + * ${dnsbl-host} - the dnsbl hostname the lookup was done against + * ${nick} - the user's nickname + * ${network-name} - the name of the network + * + */ +blacklist { + host = "rbl.efnetrbl.org"; + reject_reason = "${nick}, your IP (${ip}) is listed in EFnet's RBL. For assistance, see http://efnetrbl.org/?i=${ip}"; + + host = "dnsbl.dronebl.org"; + reject_reason = "${nick}, your IP (${ip}) is listed in DroneBL. For assistance, see http://dronebl.org/lookup_branded.do?ip=${ip}&network=${network-name}"; + + host = "torexit.dan.me.uk"; + reject_reason = "${nick}, your IP (${ip}) is listed as a TOR exit node. In order to protect ${network-name} from TOR-based abuse, we are not allowing TOR exit nodes to connect to our network."; +}; + +alias "NickServ" { + target = "NickServ"; +}; + +alias "ChanServ" { + target = "ChanServ"; +}; + +alias "OperServ" { + target = "OperServ"; +}; + +alias "MemoServ" { + target = "MemoServ"; +}; + +alias "HostServ" { + target = "HostServ"; +}; + +alias "BotServ" { + target = "BotServ"; +}; + +alias "InfoServ" { + target = "InfoServ"; +}; + +alias "GroupServ" { + target = "GroupServ"; +}; + +alias "NS" { + target = "NickServ"; +}; + +alias "CS" { + target = "ChanServ"; +}; + +alias "OS" { + target = "OperServ"; +}; + +alias "MS" { + target = "MemoServ"; +}; + +alias "HS" { + target = "HostServ"; +}; + +alias "BS" { + target = "BotServ"; +}; + +alias "IS" { + target = "InfoServ"; +}; + +alias "GS" { + target = "GroupServ"; +}; + +general { + hide_error_messages = opers; + hide_spoof_ips = yes; + + /* + * default umodes: umodes to set upon connection + * If you have enabled the ip_cloaking extension, and you wish for + * incoming clients to be cloaked upon connection, +x must be in + * the umode string below. + */ + default_umodes = "+ix"; + + default_operstring = "is an IRC Operator"; + default_adminstring = "is a Server Administrator"; + #default_operhost = "staff.testnet.net"; + #static_quit = "I like turtles!"; + servicestring = "is a Network Service"; + disable_fake_channels = no; + hide_channel_below_users = 3; + tkline_expire_notices = no; + default_floodcount = 10; + failed_oper_notice = yes; + dots_in_ident=2; + min_nonwildcard = 4; + min_nonwildcard_simple = 3; + max_accept = 100; + max_monitor = 100; + anti_nick_flood = yes; + max_nick_time = 20 seconds; + max_nick_changes = 5; + anti_spam_exit_message_time = 5 minutes; + use_part_messages = yes; + ts_warn_delta = 30 seconds; + ts_max_delta = 5 minutes; + client_exit = yes; + collision_fnc = yes; + global_snotices = yes; + dline_with_reason = yes; + kline_delay = 0 seconds; + kline_with_reason = yes; + kline_reason = "K-Lined"; + identify_service = "NickServ@services.int"; + identify_command = "IDENTIFY"; + non_redundant_klines = yes; + warn_no_nline = yes; + use_propagated_bans = yes; + stats_e_disabled = no; + stats_c_oper_only=no; + stats_h_oper_only=no; + stats_y_oper_only=no; + stats_o_oper_only=yes; + stats_P_oper_only=no; + stats_i_oper_only=masked; + stats_k_oper_only=masked; + map_oper_only = no; + operspy_admin_only = no; + operspy_dont_care_user_info = no; + secret_channels_in_whois = no; + caller_id_wait = 1 minute; + pace_wait_simple = 1 second; + pace_wait = 10 seconds; + short_motd = no; + ping_cookie = no; + connect_timeout = 30 seconds; + default_ident_timeout = 5; + disable_auth = no; + no_oper_flood = yes; + true_no_oper_flood = no; + max_targets = 4; + client_flood = 20; + use_whois_actually = no; + oper_only_umodes = operwall, locops, servnotice; + oper_umodes = locops, servnotice, operwall, wallop; + oper_snomask = "+s"; + burst_away = yes; + nick_delay = 0 seconds; # 15 minutes if you want to enable this + reject_ban_time = 1 minute; + reject_after_count = 3; + reject_duration = 5 minutes; + throttle_duration = 60; + throttle_count = 4; + expire_override_time = 5 minutes; + away_interval = 30; +}; + +modules { + path = "/usr/lib@LIBDIRSUFFIX@/elemental-ircd/modules"; + path = "/usr/lib@LIBDIRSUFFIX@/elemental-ircd/modules/autoload"; +}; |