Advertisement
Guest User

Untitled

a guest
Feb 21st, 2016
119
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 40.88 KB | None | 0 0
  1. /*
  2. * Example configuration file for Services. After making the appropriate
  3. * changes to this file, place it in the Services conf directory (as
  4. * specified in the "configure" script, default /home/username/services/conf)
  5. * under the name "services.conf".
  6. *
  7. * The format of this file is fairly simple: three types of comments are supported:
  8. * - All text after a '#' on a line is ignored, as in shell scripting
  9. * - All text after '//' on a line is ignored, as in C++
  10. * - A block of text like this one is ignored, as in C
  11. *
  12. * Outside of comments, there are three structures: blocks, keys, and values.
  13. *
  14. * A block is a named container, which contains a number of key to value pairs
  15. * - you may think of this as an array.
  16. *
  17. * A block is created like so:
  18. * foobar
  19. * {
  20. * moo = "cow"
  21. * foo = bar
  22. * }
  23. *
  24. * Note that nameless blocks are allowed and are often used with comments to allow
  25. * easily commenting an entire block, for example:
  26. * #foobar
  27. * {
  28. * moo = "cow"
  29. * foo = bar
  30. * }
  31. * is an entirely commented block.
  32. *
  33. * Keys are case insensitive. Values depend on what key - generally, information is
  34. * given in the key comment. The quoting of values (and most other syntax) is quite
  35. * flexible, however, please do not forget to quote your strings:
  36. *
  37. * "This is a parameter string with spaces in it"
  38. *
  39. * If you need to include a double quote inside a quoted string, precede it
  40. * by a backslash:
  41. *
  42. * "This string has \"double quotes\" in it"
  43. *
  44. * Time parameters can be specified either as an integer representing a
  45. * number of seconds (e.g. "3600" = 1 hour), or as an integer with a unit
  46. * specifier: "s" = seconds, "m" = minutes, "h" = hours, "d" = days.
  47. * Combinations (such as "1h30m") are not permitted. Examples (all of which
  48. * represent the same length of time, one day):
  49. *
  50. * "86400", "86400s", "1440m", "24h", "1d"
  51. *
  52. * In the documentation for each directive, one of the following will be
  53. * included to indicate whether an option is required:
  54. *
  55. * [REQUIRED]
  56. * Indicates a directive which must be given. Without it, Services will
  57. * not start.
  58. *
  59. * [RECOMMENDED]
  60. * Indicates a directive which may be omitted, but omitting it may cause
  61. * undesirable side effects.
  62. *
  63. * [OPTIONAL]
  64. * Indicates a directive which is optional. If not given, the feature
  65. * will typically be disabled. If this is not the case, more
  66. * information will be given in the documentation.
  67. *
  68. * [DISCOURAGED]
  69. * Indicates a directive which may cause undesirable side effects if
  70. * specified.
  71. *
  72. * [DEPRECATED]
  73. * Indicates a directive which will disappear in a future version of
  74. * Services, usually because its functionality has been either
  75. * superseded by that of other directives or incorporated into the main
  76. * program.
  77. */
  78.  
  79. /*
  80. * [OPTIONAL] Defines
  81. *
  82. * You can define values to other values, which can be used to easily change
  83. * many values in the configuration. at once.
  84. */
  85.  
  86. /*
  87. * The services.host define is used in multiple different locations throughout the
  88. * configuration for services clients hostnames.
  89. */
  90. define
  91. {
  92. name = "services.host"
  93. value = "services.localhost.net"
  94. }
  95.  
  96. /*
  97. * [OPTIONAL] Additional Includes
  98. *
  99. * You can include additional configuration files here.
  100. * You may also include executable files, which will be executed and
  101. * the output from it will be included into your configuration.
  102. */
  103.  
  104. #include
  105. {
  106. type = "file"
  107. name = "some.conf"
  108. }
  109.  
  110. #include
  111. {
  112. type = "executable"
  113. name = "/usr/bin/wget -q -O - http://some.misconfigured.network.com/services.conf"
  114. }
  115.  
  116. /*
  117. * [REQUIRED] IRCd Config
  118. *
  119. * This section is used to set up Anope to connect to your IRC network.
  120. * This section can be included multiple times, and Anope will attempt to
  121. * connect to each server until it finally connects.
  122. *
  123. * Each uplink IRCd should have a corresponding configuration to allow Services
  124. * to link to it.
  125. *
  126. * An example configuration for InspIRCd that is compatible with the below uplink
  127. * and serverinfo configuration would look like:
  128. *
  129. * <link name="services.localhost.net"
  130. * ipaddr="127.0.0.1"
  131. * port="7000"
  132. * sendpass="mypassword"
  133. * recvpass="mypassword">
  134. * <uline server="services.localhost.net" silent="yes">
  135. * <bind address="127.0.0.1" port="7000" type="servers">
  136. *
  137. * An example configuration for UnrealIRCd that is compatible with the below uplink
  138. * and serverinfo configuration would look like:
  139. *
  140. * link services.localhost.net
  141. * {
  142. * username *;
  143. * hostname *;
  144. * bind-ip "127.0.0.1";
  145. * port 7000;
  146. * hub *;
  147. * password-connect "mypassword";
  148. * password-receive "mypassword";
  149. * class servers;
  150. * };
  151. * ulines { services.localhost.net; };
  152. * listen 127.0.0.1:7000;
  153. */
  154. uplink
  155. {
  156. /*
  157. * The IP or hostname of the IRC server you wish to connect Services to.
  158. * Usually, you will want to connect Services over 127.0.0.1 (aka localhost).
  159. *
  160. * NOTE: On some shell providers, this will not be an option.
  161. */
  162. host = "***.+++.***.+++"
  163.  
  164. /*
  165. * Enable if Services should connect using IPv6.
  166. */
  167. ipv6 = no
  168.  
  169. /*
  170. * Enable if Services should connect using SSL.
  171. * You must have an SSL module loaded for this to work.
  172. */
  173. ssl = no
  174.  
  175. /*
  176. * The port to connect to.
  177. * The IRCd *MUST* be configured to listen on this port, and to accept
  178. * server connections.
  179. *
  180. * Refer to your IRCd documentation for how this is to be done.
  181. */
  182. port = 6667
  183.  
  184. /*
  185. * The password to send to the IRC server for authentication.
  186. * This must match the link block on your IRCd.
  187. *
  188. * Refer to your IRCd documentation for more information on link blocks.
  189. */
  190. password = "xxxx"
  191. }
  192.  
  193. /*
  194. * [REQUIRED] Server Information
  195. *
  196. * This section contains information about the Services server.
  197. */
  198. serverinfo
  199. {
  200. /*
  201. * The hostname that Services will be seen as, it must have no conflicts with any
  202. * other server names on the rest of your IRC network. Note that it does not have
  203. * to be an existing hostname, just one that isn't on your network already.
  204. */
  205. /* name = "services.localhost.net" */
  206. name = "***.+++.***.+++"
  207. /*
  208. * The text which should appear as the server's information in /whois and similar
  209. * queries.
  210. */
  211. description = "Services for IRC Networks"
  212.  
  213. /*
  214. * The local address that Services will bind to before connecting to the remote
  215. * server. This may be useful for multihomed hosts. If omitted, Services will let
  216. * the Operating System choose the local address. This directive is optional.
  217. *
  218. * If you don't know what this means or don't need to use it, just leave this
  219. * directive commented out.
  220. */
  221. #localhost = "nowhere."
  222.  
  223. /*
  224. * What Server ID to use for this connection?
  225. * Note: This should *ONLY* be used for TS6/P10 IRCds. Refer to your IRCd documentation
  226. * to see if this is needed.
  227. */
  228. #id = "00A"
  229.  
  230. /*
  231. * The filename containing the Services process ID. The path is relative to the
  232. * services root directory.
  233. */
  234. pid = "data/services.pid"
  235.  
  236. /*
  237. * The filename containing the Message of the Day. The path is relative to the
  238. * services root directory.
  239. */
  240. motd = "conf/services.motd"
  241. }
  242.  
  243. /*
  244. * [REQUIRED] Protocol module
  245. *
  246. * This directive tells Anope which IRCd Protocol to speak when connecting.
  247. * You MUST modify this to match the IRCd you run.
  248. *
  249. * Supported:
  250. * - bahamut
  251. * - charybdis
  252. * - hybrid
  253. * - inspircd12
  254. * - inspircd20
  255. * - ngircd
  256. * - plexus
  257. * - ratbox
  258. * - unreal
  259. */
  260. module
  261. {
  262. name = "unreal"
  263.  
  264. /*
  265. * Some protocol modules can enforce mode locks server-side. This reduces the spam caused by
  266. * services immediately reversing mode changes for locked modes.
  267. *
  268. * If the protocol module you have loaded does not support this, this setting will have no effect.
  269. */
  270. use_server_side_mlock = yes
  271.  
  272. /*
  273. * Some protocol modules can enforce topic locks server-side. This reduces the spam caused by
  274. * services immediately reversing topic changes.
  275. *
  276. * If the protocol module you have loaded does not support this, this setting will have no effect.
  277. */
  278. use_server_side_topiclock = yes
  279. }
  280.  
  281. /*
  282. * [REQUIRED] Network Information
  283. *
  284. * This section contains information about the IRC network that Services will be
  285. * connecting to.
  286. */
  287. networkinfo
  288. {
  289. /*
  290. * This is the name of the network that Services will be running on.
  291. */
  292. networkname = "LocalNet"
  293.  
  294. /*
  295. * Set this to the maximum allowed nick length on your network.
  296. * Be sure to set this correctly, as setting this wrong can result in
  297. * Services being disconnected from the network.
  298. */
  299. nicklen = 31
  300.  
  301. /* Set this to the maximum allowed ident length on your network.
  302. * Be sure to set this correctly, as setting this wrong can result in
  303. * Services being disconnected from the network.
  304. */
  305. userlen = 10
  306.  
  307. /* Set this to the maximum allowed hostname length on your network.
  308. * Be sure to set this correctly, as setting this wrong can result in
  309. * Services being disconnected from the network.
  310. */
  311. hostlen = 64
  312.  
  313. /* Set this to the maximum allowed channel length on your network.
  314. */
  315. chanlen = 32
  316.  
  317. /* The maximum number of list modes settable on a channel (such as b, e, I).
  318. * Comment out or set to 0 to disable.
  319. */
  320. modelistsize = 100
  321.  
  322. /*
  323. * The characters allowed in hostnames. This is used for validating hostnames given
  324. * to services, such as BotServ bot hostnames and user vhosts. Changing this is not
  325. * recommended unless you know for sure your IRCd supports whatever characters you are
  326. * wanting to use. Telling services to set a vHost containing characters your IRCd
  327. * disallows could potentially break the IRCd and/or Services.
  328. *
  329. * It is recommended you DON'T change this.
  330. */
  331. vhost_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-"
  332.  
  333. /*
  334. * If set to true, allows vHosts to not contain dots (.).
  335. * Newer IRCds generally do not have a problem with this, but the same warning as
  336. * vhost_chars applies.
  337. *
  338. * It is recommended you DON'T change this.
  339. */
  340. allow_undotted_vhosts = false
  341.  
  342. /*
  343. * The characters that are not allowed to be at the very beginning or very ending
  344. * of a vHost. The same warning as vhost_chars applies.
  345. *
  346. * It is recommended you DON'T change this.
  347. */
  348. disallow_start_or_end = ".-"
  349. }
  350.  
  351. /*
  352. * [REQUIRED] Services Options
  353. *
  354. * This section contains various options which determine how Services will operate.
  355. */
  356. options
  357. {
  358. /*
  359. * On Linux/UNIX systems Anope can setuid and setgid to this user and group
  360. * after starting up. This is useful if Anope has to bind to privileged ports
  361. */
  362. #user = "anope"
  363. #group = "anope"
  364.  
  365. /*
  366. * The case mapping used by services. This must be set to a valid locale name
  367. * installed on your machine. Services use this case map to compare, with
  368. * case insensitivity, things such as nick names, channel names, etc.
  369. *
  370. * We provide two special casemaps shipped with Anope, ascii and rfc1459.
  371. *
  372. * This value should be set to what your IRCd uses, which is probably rfc1459,
  373. * however Anope has always used ascii for comparison, so the default is ascii.
  374. *
  375. * Changing this value once set is not recommended.
  376. */
  377. casemap = "ascii"
  378.  
  379. /*
  380. * This key is used to initiate the random number generator. This number
  381. * MUST be random as you want your passcodes to be random. Don't give this
  382. * key to anyone! Keep it private!
  383. *
  384. * NOTE: If you don't uncomment this or keep the default values, any talented
  385. * programmer would be able to easily "guess" random strings used to mask
  386. * information. Be safe, and come up with a 7-digit number.
  387. *
  388. * This directive is optional, but highly recommended.
  389. */
  390. #seed = 9866235
  391.  
  392. /*
  393. * If set, Services will perform more stringent checks on passwords. If this
  394. * isn't set, Services will only disallow a password if it is the same as the
  395. * entity (nickname name) with which it is associated. When set, however,
  396. * Services will also check that the password is at least five
  397. * characters long, and in the future will probably check other things
  398. * as well.
  399. *
  400. * This directive is optional, but recommended.
  401. */
  402. strictpasswords = yes
  403.  
  404. /*
  405. * Sets the number of invalid password tries before Services removes a user
  406. * from the network. If a user enters a number of invalid passwords equal to
  407. * the given amount for any Services function or combination of functions
  408. * during a single IRC session (subject to badpasstimeout, below), Services
  409. * will issues a /KILL for the user. If not given, Services will ignore
  410. * failed password attempts (though they will be logged in any case).
  411. *
  412. * This directive is optional, but recommended.
  413. */
  414. badpasslimit = 5
  415.  
  416. /*
  417. * Sets the time after which invalid passwords are forgotten about. If a user
  418. * does not enter any incorrect passwords in this amount of time, the incorrect
  419. * password count will reset to zero. If not given, the timeout will be
  420. * disabled, and the incorrect password count will never be reset until the user
  421. * disconnects.
  422. *
  423. * This directive is optional.
  424. */
  425. badpasstimeout = 1h
  426.  
  427. /*
  428. * Sets the delay between automatic database updates.
  429. */
  430. updatetimeout = 5m
  431.  
  432. /*
  433. * Sets the delay between checks for expired nicknames and channels.
  434. */
  435. expiretimeout = 30m
  436.  
  437. /*
  438. * Sets the timeout period for reading from the uplink.
  439. */
  440. readtimeout = 5s
  441.  
  442. /*
  443. * Sets the interval between sending warning messages for program errors via
  444. * WALLOPS/GLOBOPS.
  445. */
  446. warningtimeout = 4h
  447.  
  448. /*
  449. * Sets the (maximum) frequency at which the timeout list is checked. This,
  450. * combined with readtimeout above, determines how accurately timed events,
  451. * such as nick kills, occur; it also determines how much CPU time Services
  452. * will use doing this. Higher values will cause less accurate timing but
  453. * less CPU usage.
  454. *
  455. * Note that this value is not an absolute limit on the period between
  456. * checks of the timeout list; the previous may be as great as readtimeout
  457. * (above) during periods of inactivity.
  458. *
  459. * If this directive is not given, it will default to 0.
  460. */
  461. timeoutcheck = 3s
  462.  
  463. /*
  464. * If set, this will allow users to let Services send PRIVMSGs to them
  465. * instead of NOTICEs. Also see the defmsg option of nickserv:defaults,
  466. * which also toggles the default communication (PRIVMSG or NOTICE) to
  467. * use for unregistered users.
  468. *
  469. * This is a feature that is against the IRC RFC and should be used ONLY
  470. * if absolutely necessary.
  471. *
  472. * This directive is optional, and not recommended.
  473. */
  474. #useprivmsg = yes
  475.  
  476. /*
  477. * If set, will force Services to only respond to PRIVMSGs addresses to
  478. * Nick@ServerName - e.g. NickServ@localhost.net. This should be used in
  479. * conjunction with IRCd aliases. This directive is optional.
  480. *
  481. * This option will have no effect on some IRCds, such as TS6 IRCds.
  482. */
  483. #usestrictprivmsg = yes
  484.  
  485. /*
  486. * If set, Services will only show /stats o to IRC Operators. This directive
  487. * is optional.
  488. */
  489. #hidestatso = yes
  490.  
  491. /*
  492. * A space-separated list of ulined servers on your network, it is assumed that
  493. * the servers in this list are allowed to set channel modes and Services will
  494. * not attempt to reverse their mode changes.
  495. *
  496. * WARNING: Do NOT put your normal IRC user servers in this directive.
  497. *
  498. * This directive is optional.
  499. */
  500. #ulineservers = "stats.your.network"
  501.  
  502. /*
  503. * How long to wait between connection retries with the uplink(s).
  504. */
  505. retrywait = 60s
  506.  
  507. /*
  508. * If set, Services will hide commands that users don't have the privilege to execute
  509. * from HELP output.
  510. */
  511. hideprivilegedcommands = yes
  512.  
  513. /*
  514. * If set, Services will hide commands that users can't execute because they are not
  515. * logged in from HELP output.
  516. */
  517. hideregisteredcommands = yes
  518.  
  519. /* The regex engine to use, as provided by the regex modules.
  520. * Leave commented to disable regex matching.
  521. *
  522. * Note for this to work the regex module providing the regex engine must be loaded.
  523. */
  524. regexengine = "regex/pcre"
  525.  
  526. /*
  527. * A list of languages to load on startup that will be available in /nickserv set language.
  528. * Useful if you translate Anope to your language. (Explained further in docs/LANGUAGE).
  529. * Note that english should not be listed here because it is the base language.
  530. *
  531. * Removing .UTF-8 will instead use the default encoding for the language, eg. iso-8859-1 for western European languages.
  532. */
  533. languages = "ca_ES.UTF-8 de_DE.UTF-8 el_GR.UTF-8 es_ES.UTF-8 fr_FR.UTF-8 hu_HU.UTF-8 it_IT.UTF-8 nl_NL.UTF-8 pl_PL.UTF-8 pt_PT.UTF-8 ru_RU.UTF-8 tr_TR.UTF-8"
  534.  
  535. /*
  536. * Default language that non- and newly-registered nicks will receive messages in.
  537. * Set to "en" to enable English. Defaults to the language the system uses.
  538. */
  539. #defaultlanguage = "es_ES.UTF-8"
  540. }
  541.  
  542. /*
  543. * [OPTIONAL] BotServ
  544. *
  545. * Includes botserv.example.conf, which is necessary for BotServ functionality.
  546. *
  547. * Remove this block to disable BotServ.
  548. */
  549. include
  550. {
  551. type = "file"
  552. name = "botserv.example.conf"
  553. }
  554.  
  555. /*
  556. * [RECOMMENDED] ChanServ
  557. *
  558. * Includes chanserv.example.conf, which is necessary for ChanServ functionality.
  559. *
  560. * Remove this block to disable ChanServ.
  561. */
  562. include
  563. {
  564. type = "file"
  565. name = "chanserv.example.conf"
  566. }
  567.  
  568. /*
  569. * [RECOMMENDED] Global
  570. *
  571. * Includes global.example.conf, which is necessary for Global functionality.
  572. *
  573. * Remove this block to disable Global.
  574. */
  575. include
  576. {
  577. type = "file"
  578. name = "global.example.conf"
  579. }
  580.  
  581. /*
  582. * [OPTIONAL] HostServ
  583. *
  584. * Includes hostserv.example.conf, which is necessary for HostServ functionality.
  585. *
  586. * Remove this block to disable HostServ.
  587. */
  588. include
  589. {
  590. type = "file"
  591. name = "hostserv.example.conf"
  592. }
  593.  
  594. /*
  595. * [OPTIONAL] MemoServ
  596. *
  597. * Includes memoserv.example.conf, which is necessary for MemoServ functionality.
  598. *
  599. * Remove this block to disable MemoServ.
  600. */
  601. include
  602. {
  603. type = "file"
  604. name = "memoserv.example.conf"
  605. }
  606.  
  607. /*
  608. * [OPTIONAL] NickServ
  609. *
  610. * Includes nickserv.example.conf, which is necessary for NickServ functionality.
  611. *
  612. * Remove this block to disable NickServ.
  613. */
  614. include
  615. {
  616. type = "file"
  617. name = "nickserv.example.conf"
  618. }
  619.  
  620. /*
  621. * [RECOMMENDED] OperServ
  622. *
  623. * Includes operserv.example.conf, which is necessary for OperServ functionality.
  624. *
  625. * Remove this block to disable OperServ.
  626. */
  627. include
  628. {
  629. type = "file"
  630. name = "operserv.example.conf"
  631. }
  632.  
  633. /*
  634. * [RECOMMENDED] Logging Configuration
  635. *
  636. * This section is used for configuring what is logged and where it is logged to.
  637. * You may have multiple log blocks if you wish. Remember to properly secure any
  638. * channels you choose to have Anope log to!
  639. */
  640. log
  641. {
  642. /*
  643. * Target(s) to log to, which may be one of the following:
  644. * - a channel name
  645. * - a filename
  646. * - globops
  647. */
  648. target = "services.log"
  649.  
  650. /* Log to both services.log and the channel #services
  651. *
  652. * Note that some older IRCds, such as Ratbox, require services to be in the
  653. * log channel to be able to message it. To do this, configure service:channels to
  654. * join your logging channel.
  655. */
  656. #target = "services.log #services"
  657.  
  658. /*
  659. * The source(s) to only accept log messages from. Leave commented to allow all sources.
  660. * This can be a users name, a channel name, one of our clients (eg, OperServ), or a server name.
  661. */
  662. #source = ""
  663.  
  664. /*
  665. * The bot used to log generic messages which have no predefined sender if there
  666. * is a channel in the target directive.
  667. */
  668. bot = "Global"
  669.  
  670. /*
  671. * The number of days to keep logfiles, only useful if you are logging to a file.
  672. * Set to 0 to never delete old logfiles.
  673. *
  674. * Note that Anope must run 24 hours a day for this feature to work correctly.
  675. */
  676. logage = 7
  677.  
  678. /*
  679. * What types of log messages should be logged by this block. There are nine general categories:
  680. *
  681. * admin - Execution of admin commands (OperServ, etc).
  682. * override - A services operator using their powers to execute a command they couldn't normally.
  683. * commands - Execution of general commands.
  684. * servers - Server actions, linking, squitting, etc.
  685. * channels - Actions in channels such as joins, parts, kicks, etc.
  686. * users - User actions such as connecting, disconnecting, changing name, etc.
  687. * other - All other messages without a category.
  688. * rawio - Logs raw input and output from services
  689. * debug - Debug messages (log files can become VERY large from this).
  690. *
  691. * These options determine what messages from the categories should be logged. Wildcards are accepted, and
  692. * you can also negate values with a ~. For example, "~operserv/akill operserv/*" would log all operserv
  693. * messages except for operserv/akill. Note that processing stops at the first matching option, which
  694. * means "* ~operserv/*" would log everything because * matches everything.
  695. *
  696. * Valid admin, override, and command options are:
  697. * pesudo-serv/commandname (eg, operserv/akill, chanserv/set)
  698. *
  699. * Valid server options are:
  700. * connect, quit, sync, squit
  701. *
  702. * Valid channel options are:
  703. * create, destroy, join, part, kick, leave, mode
  704. *
  705. * Valid user options are:
  706. * connect, disconnect, quit, nick, ident, host, mode, maxusers, oper
  707. *
  708. * Rawio and debug are simple yes/no answers, there are no types for them.
  709. *
  710. * Note that modules may add their own values to these options.
  711. */
  712. admin = "*"
  713. override = "chanserv/* nickserv/* memoserv/set ~botserv/set botserv/*"
  714. commands = "~operserv/* *"
  715. servers = "*"
  716. #channels = "~mode *"
  717. users = "connect disconnect nick"
  718. other = "*"
  719. rawio = no
  720. debug = no
  721. }
  722.  
  723. /*
  724. * A log block to globops some useful things.
  725. */
  726. log
  727. {
  728. target = "globops"
  729. admin = "global/* operserv/mode operserv/kick operserv/akill operserv/s*line operserv/noop operserv/jupe operserv/oline operserv/set operserv/svsnick operserv/svsjoin operserv/svspart nickserv/getpass */drop"
  730. servers = "squit"
  731. users = "oper"
  732. other = "expire/* bados akill/*"
  733. }
  734.  
  735. /*
  736. * [RECOMMENDED] Oper Access Config
  737. *
  738. * This section is used to set up staff access to restricted oper only commands.
  739. * You may define groups of commands and privileges, as well as who may use them.
  740. *
  741. * This block is recommended, as without it you will be unable to access most oper commands.
  742. * It replaces the old ServicesRoot directive amongst others.
  743. *
  744. * The command names below are defaults and are configured in the *serv.conf's. If you configure
  745. * additional commands with permissions, such as commands from third party modules, the permissions
  746. * must be included in the opertype block before the command can be used.
  747. *
  748. * Available privileges:
  749. * botserv/administration - Can view and assign private BotServ bots
  750. * chanserv/administration - Can modify the settings of any channel (including changing of the owner!)
  751. * chanserv/access/modify - Can modify channel access and akick lists, and use /chanserv enforce
  752. * chanserv/auspex - Can see any information with /chanserv info
  753. * chanserv/no-register-limit - May register an unlimited number of channels and nicknames
  754. * chanserv/kick - Can kick and ban users from channels through ChanServ
  755. * memoserv/info - Can see any information with /memoserv info
  756. * memoserv/set-limit - Can set the limit of max stored memos on any user and channel
  757. * memoserv/no-limit - Can send memos through limits and throttles
  758. * nickserv/access - Can modify other users access and certificate lists
  759. * nickserv/alist - Can see the channel access list of other users
  760. * nickserv/auspex - Can see any information with /nickserv info
  761. * nickserv/confirm - Can confirm other users nicknames
  762. * nickserv/drop - Can drop other users nicks
  763. * operserv/config - Can modify services's configuration
  764. * protected - Can not be kicked from channels by Services
  765. *
  766. * Available commands:
  767. * botserv/bot/del botserv/bot/add botserv/bot/change botserv/set/private
  768. * botserv/set/nobot
  769. *
  770. * chanserv/access/list chanserv/drop chanserv/getkey chanserv/invite
  771. * chanserv/list chanserv/suspend chanserv/topic
  772. *
  773. * chanserv/saset/bantype chanserv/saset/description chanserv/saset/email chanserv/saset/keepmodes
  774. * chanserv/saset/founder chanserv/saset/keeptopic chanserv/saset/restricted
  775. * chanserv/saset/peace chanserv/saset/persist chanserv/saset/private
  776. * chanserv/saset/secure chanserv/saset/securefounder chanserv/saset/secureops
  777. * chanserv/saset/signkick chanserv/saset/successor chanserv/saset/topiclock
  778. * chanserv/saset/url chanserv/saset/noexpire chanserv/saset/autoop
  779. *
  780. * memoserv/sendall memoserv/staff
  781. *
  782. * nickserv/getpass nickserv/getemail nickserv/suspend nickserv/ajoin
  783. * nickserv/list
  784. *
  785. * nickserv/saset/autoop nickserv/saset/email nickserv/saset/greet nickserv/saset/password
  786. * nickserv/saset/display nickserv/saset/kill nickserv/saset/language nickserv/saset/message
  787. * nickserv/saset/private nickserv/saset/secure nickserv/saset/url nickserv/saset/noexpire
  788. * nickserv/saset/keepmodes
  789. *
  790. * hostserv/set hostserv/del hostserv/list
  791. *
  792. * global/global
  793. *
  794. * operserv/news operserv/stats operserv/kick operserv/exception operserv/seen
  795. * operserv/mode operserv/session operserv/modinfo operserv/ignore operserv/chanlist
  796. * operserv/chankill operserv/akill operserv/sqline operserv/snline operserv/userlist
  797. * operserv/oper operserv/config operserv/umode operserv/logsearch
  798. * operserv/modload operserv/jupe operserv/set operserv/noop
  799. * operserv/quit operserv/update operserv/reload operserv/restart
  800. * operserv/shutdown operserv/svs operserv/oline operserv/kill
  801. *
  802. * Firstly, we define 'opertypes' which are named whatever we want ('Network Administrator', etc).
  803. * These can contain commands for oper-only strings (see above) which grants access to that specific command,
  804. * and privileges (which grant access to more general permissions for the named area).
  805. * Wildcard entries are permitted for both, e.g. 'commands = "operserv/*"' for all OperServ commands.
  806. *
  807. * Below are some default example types, but this is by no means exhaustive,
  808. * and it is recommended that you configure them to your needs.
  809. */
  810.  
  811. opertype
  812. {
  813. /* The name of this opertype */
  814. name = "Helper"
  815.  
  816. /* What commands (see above) this opertype has */
  817. commands = "hostserv/*"
  818. }
  819.  
  820. opertype
  821. {
  822. /* The name of this opertype */
  823. name = "Services Operator"
  824.  
  825. /* What opertype(s) this inherits from. Seperate with a comma. */
  826. inherits = "Helper, Another Helper"
  827.  
  828. /* What commands (see above) this opertype may use */
  829. commands = "chanserv/list chanserv/suspend chanserv/topic memoserv/staff nickserv/list nickserv/suspend operserv/mode operserv/chankill operserv/akill operserv/session operserv/modinfo operserv/sqline operserv/oper operserv/kick operserv/ignore operserv/snline"
  830.  
  831. /* What privs (see above) this opertype has */
  832. privs = "chanserv/auspex chanserv/no-register-limit memoserv/* nickserv/auspex nickserv/confirm"
  833.  
  834. /*
  835. * Modes to be set on users when they identify to accounts linked to this opertype.
  836. *
  837. * This can be used to automatically oper users who identify for services operator accounts, and is
  838. * useful for setting modes such as Plexus's user mode +N.
  839. *
  840. * Note that some IRCds, such as InspIRCd, do not allow directly setting +o, and this will not work.
  841. */
  842. #modes = "+o"
  843. }
  844.  
  845. opertype
  846. {
  847. name = "Services Administrator"
  848.  
  849. inherits = "Services Operator"
  850.  
  851. commands = "chanserv/access/list chanserv/drop chanserv/getkey chanserv/saset/noexpire memoserv/sendall nickserv/saset/* nickserv/getemail operserv/news operserv/jupe operserv/svs operserv/stats operserv/oline operserv/noop operserv/forbid global/*"
  852.  
  853. privs = "*"
  854. }
  855.  
  856. opertype
  857. {
  858. name = "Services Root"
  859.  
  860. commands = "*"
  861.  
  862. privs = "*"
  863. }
  864.  
  865. /*
  866. * After defining different types of operators in the above opertype section, we now define who is in these groups
  867. * through 'oper' blocks, similar to ircd access.
  868. *
  869. * The default is to comment these out (so NOBODY will have Services access).
  870. * You probably want to add yourself and a few other people at minimum.
  871. *
  872. * As with all permissions, make sure to only give trustworthy people access to Services.
  873. */
  874.  
  875. oper
  876. {
  877. /* The nickname of this services oper */
  878. name = "Nick.uguale.alla.conf.in.UnRealiRCD.nella.Sezione.OPER"
  879.  
  880. /* The opertype this person will have */
  881. type = "Services Root"
  882.  
  883. /* If set, the user must be an oper on the IRCd to gain their Services
  884. * oper privileges.
  885. */
  886. require_oper = yes
  887.  
  888. /* An optional password. If defined the user must login using "/msg OperServ LOGIN" first */
  889. password = "Password.uguale.alla.conf.in.UnRealiRCD.nella.Sezione.OPER"
  890.  
  891. /* An optional SSL fingerprint. If defined, it's required to be able to use this opertype. */
  892. #certfp = "ed3383b3f7d74e89433ddaa4a6e5b2d7"
  893.  
  894. /* An optional list of user@host masks. If defined the user must be connected from one of them */
  895. #host = "*@*.anope.org ident@*"
  896.  
  897. /* An optional vHost to set on users who identify for this oper block.
  898. * This will override HostServ vHosts, and may not be available on all IRCds
  899. */
  900. #vhost = "oper.mynet"
  901. }
  902.  
  903. #oper
  904. {
  905. name = "nick2"
  906. type = "Services Administrator"
  907. }
  908.  
  909. #oper
  910. {
  911. name = "nick3"
  912. type = "Helper"
  913. }
  914.  
  915. /*
  916. * [OPTIONAL] Mail Config
  917. *
  918. * This section contains settings related to the use of e-mail from Services.
  919. * If the usemail directive is set to yes, unless specified otherwise, all other
  920. * directives are required.
  921. *
  922. * NOTE: Users can find the IP of the machine services is running on by examining
  923. * mail headers. If you do not want your IP known, you should set up a mail relay
  924. * to strip the relevant headers.
  925. */
  926. mail
  927. {
  928. /*
  929. * If set, this option enables the mail commands in Services. You may choose
  930. * to disable it if you have no Sendmail-compatible mailer installed. Whilst
  931. * this directive (and entire block) is optional, it is required if
  932. * nickserv:registration is set to yes.
  933. */
  934. usemail = yes
  935.  
  936. /*
  937. * This is the command-line that will be used to call the mailer to send an
  938. * e-mail. It must be called with all the parameters needed to make it
  939. * scan the mail input to find the mail recipient; consult your mailer
  940. * documentation.
  941. *
  942. * Postfix users must use the compatible sendmail utility provided with
  943. * it. This one usually needs no parameters on the command-line. Most
  944. * sendmail applications (or replacements of it) require the -t option
  945. * to be used.
  946. */
  947. sendmailpath = "/usr/sbin/sendmail -t"
  948.  
  949. /*
  950. * This is the e-mail address from which all the e-mails are to be sent from.
  951. * It should really exist.
  952. */
  953. sendfrom = "services@localhost.net"
  954.  
  955. /*
  956. * This controls the minimum amount of time a user must wait before sending
  957. * another e-mail after they have sent one. It also controls the minimum time
  958. * a user must wait before they can receive another e-mail.
  959. *
  960. * This feature prevents users from being mail bombed using Services and
  961. * it is highly recommended that it be used.
  962. *
  963. * This directive is optional, but highly recommended.
  964. */
  965. delay = 5m
  966.  
  967. /*
  968. * If set, Services will not attempt to put quotes around the TO: fields
  969. * in e-mails.
  970. *
  971. * This directive is optional, and as far as we know, it's only needed
  972. * if you are using ESMTP or QMail to send out e-mails.
  973. */
  974. #dontquoteaddresses = yes
  975.  
  976. /*
  977. * The subject and message of emails sent to users when they register accounts.
  978. */
  979. registration_subject = "Nickname registration for %n"
  980. registration_message = "Hi,
  981.  
  982. You have requested to register the nickname %n on %N.
  983. Please type \" /msg NickServ CONFIRM %c \" to complete registration.
  984.  
  985. If you don't know why this mail was sent to you, please ignore it silently.
  986.  
  987. %N administrators."
  988.  
  989. /*
  990. * The subject and message of emails sent to users when they request a new password.
  991. */
  992. reset_subject = "Reset password request for %n"
  993. reset_message = "Hi,
  994.  
  995. You have requested to have the password for %n reset.
  996. To reset your password, type \" /msg NickServ CONFIRM %n %c \"
  997.  
  998. If you don't know why this mail was sent to you, please ignore it silently.
  999.  
  1000. %N administrators."
  1001.  
  1002. /*
  1003. * The subject and message of emails sent to users when they request a new email address.
  1004. */
  1005. emailchange_subject = "Email confirmation"
  1006. emailchange_message = "Hi,
  1007.  
  1008. You have requested to change your email address to %e.
  1009. Please type \" /msg NickServ CONFIRM %c \" to confirm this change.
  1010.  
  1011. If you don't know why this mail was sent to you, please ignore it silently.
  1012.  
  1013. %N administrators."
  1014.  
  1015. /*
  1016. * The subject and message of emails sent to users when they receive a new memo.
  1017. */
  1018. memo_subject = "New memo"
  1019. memo_message = "Hi %n,
  1020.  
  1021. You've just received a new memo from %s. This is memo number %d.
  1022.  
  1023. Memo text:
  1024.  
  1025. %t"
  1026. }
  1027.  
  1028. /*
  1029. * [REQUIRED] Database configuration.
  1030. *
  1031. * This section is used to configure databases used by Anope.
  1032. * You should at least load one database method, otherwise any data you
  1033. * have will not be stored!
  1034. */
  1035.  
  1036. /*
  1037. * [DEPRECATED] db_old
  1038. *
  1039. * This is the old binary database format from late Anope 1.7.x, Anope 1.8.x, and
  1040. * early Anope 1.9.x. This module only loads these databases, and will NOT save them.
  1041. * You should only use this to upgrade old databases to a newer database format by loading
  1042. * other database modules in addition to this one, which will be used when saving databases.
  1043. */
  1044. #module
  1045. {
  1046. name = "db_old"
  1047.  
  1048. /*
  1049. * This is the encryption type used by the databases. This must be set correctly or
  1050. * your passwords will not work. Valid options are: md5, oldmd5, sha1, and plain.
  1051. * You must also be sure to load the correct encryption module below in the Encryption
  1052. * Modules section so that your passwords work.
  1053. */
  1054. #hash = "md5"
  1055. }
  1056.  
  1057. /*
  1058. * [RECOMMENDED] db_flatfile
  1059. *
  1060. * This is the default flatfile database format.
  1061. */
  1062. module
  1063. {
  1064. name = "db_flatfile"
  1065.  
  1066. /*
  1067. * The database name db_flatfile should use
  1068. */
  1069. database = "anope.db"
  1070.  
  1071. /*
  1072. * Sets the number of days backups of databases are kept. If you don't give it,
  1073. * or if you set it to 0, Services won't backup the databases.
  1074. *
  1075. * NOTE: Services must run 24 hours a day for this feature to work.
  1076. *
  1077. * This directive is optional, but recommended.
  1078. */
  1079. keepbackups = 3
  1080.  
  1081. /*
  1082. * Allows Services to continue file write operations (i.e. database saving)
  1083. * even if the original file cannot be backed up. Enabling this option may
  1084. * allow Services to continue operation under conditions where it might
  1085. * otherwise fail, such as a nearly-full disk.
  1086. *
  1087. * NOTE: Enabling this option can cause irrecoverable data loss under some
  1088. * conditions, so make CERTAIN you know what you're doing when you enable it!
  1089. *
  1090. * This directive is optional, and you are discouraged against enabling it.
  1091. */
  1092. #nobackupokay = yes
  1093.  
  1094. /*
  1095. * If enabled, services will fork a child process to save databases.
  1096. *
  1097. * This is only useful with very large databases, with hundreds
  1098. * of thousands of objects, that have a noticeable delay from
  1099. * writing databases.
  1100. *
  1101. * If your database is large enough cause a noticeable delay when
  1102. * saving you should consider a more powerful alternative such
  1103. * as db_sql or db_redis, which incrementally update their
  1104. * databases asynchronously in real time.
  1105. */
  1106. fork = no
  1107. }
  1108.  
  1109. /*
  1110. * db_sql and db_sql_live
  1111. *
  1112. * db_sql module allows saving and loading databases using one of the SQL engines.
  1113. * This module loads the databases once on startup, then incrementally updates
  1114. * objects in the database as they are changed within Anope in real time. Changes
  1115. * to the SQL tables not done by Anope will have no effect and will be overwritten.
  1116. *
  1117. * db_sql_live module allows saving and loading databases using one of the SQL engines.
  1118. * This module reads and writes to SQL in real time. Changes to the SQL tables
  1119. * will be immediately reflected into Anope. This module should not be loaded
  1120. * in conjunction with db_sql.
  1121. *
  1122. */
  1123. #module
  1124. {
  1125. name = "db_sql"
  1126. #name = "db_sql_live"
  1127.  
  1128. /*
  1129. * The SQL service db_sql(_live) should use, these are configured in modules.conf.
  1130. * For MySQL, this should probably be mysql/main.
  1131. */
  1132. engine = "sqlite/main"
  1133.  
  1134. /*
  1135. * An optional prefix to prepended to the name of each created table.
  1136. * Do not use the same prefix for other programs.
  1137. */
  1138. #prefix = "anope_db_"
  1139.  
  1140. /* Whether or not to import data from another database module in to SQL on startup.
  1141. * If you enable this, be sure that the database services is configured to use is
  1142. * empty and that another database module to import from is loaded before db_sql.
  1143. * After you enable this and do a database import you should disable it for
  1144. * subsequent restarts.
  1145. *
  1146. * Note that you can not import databases using db_sql_live. If you want to import
  1147. * databases and use db_sql_live you should import them using db_sql, then shut down
  1148. * and start services with db_sql_live.
  1149. */
  1150. import = false
  1151. }
  1152.  
  1153. /*
  1154. * db_redis.
  1155. *
  1156. * This module allows using Redis (http://redis.io) as a database backend.
  1157. * This module requires that m_redis is loaded and configured properly.
  1158. *
  1159. * Redis 2.8 supports keyspace notifications which allows Redis to push notifications
  1160. * to Anope about outside modifications to the database. This module supports this and
  1161. * will internally reflect any changes made to the database immediately once notified.
  1162. * See docs/REDIS for more information regarding this.
  1163. */
  1164. #module
  1165. {
  1166. name = "db_redis"
  1167.  
  1168. /*
  1169. * Redis database to use. This must be configured with m_redis.
  1170. */
  1171. engine = "redis/main"
  1172. }
  1173.  
  1174. /*
  1175. * [RECOMMENDED] Encryption modules.
  1176. *
  1177. * The encryption modules are used when dealing with passwords. This determines how
  1178. * the passwords are stored in the databases, and does not add any security as
  1179. * far as transmitting passwords over the network goes.
  1180. *
  1181. * Without any encryption modules loaded users will not be able to authenticate unless
  1182. * there is another module loaded that provides authentication checking, such as
  1183. * m_ldap_authentication or m_sql_authentication.
  1184. *
  1185. * With enc_none, passwords will be stored in plain text, allowing for passwords
  1186. * to be recovered later but it isn't secure and therefore is not recommended.
  1187. *
  1188. * The other encryption modules use one-way encryption, so the passwords can not
  1189. * be recovered later if those are used.
  1190. *
  1191. * The first encryption module loaded is the primary encryption module. All new passwords are
  1192. * encrypted by this module. Old passwords stored in another encryption method are
  1193. * automatically re-encrypted by the primary encryption module on next identify.
  1194. *
  1195. * NOTE: enc_old is Anope's previous (broken) MD5 implementation which is present in
  1196. * versions prior to Anope 1.7.17. If your databases were made using that module,
  1197. * use this and not enc_md5.
  1198. *
  1199. * NOTE: enc_sha1 relies on how the OS stores 2+ byte data internally, and is
  1200. * potentially broken when moving between 2 different OSes, such as moving from
  1201. * Linux to Windows. It is recommended that you use enc_sha256 instead if you want
  1202. * to use an SHA-based encryption. If you choose to do so, it is also recommended
  1203. * that you first try to get everyone's passwords converted to enc_sha256 before
  1204. * switching OSes by placing enc_sha256 at the beginning of the list.
  1205. *
  1206. */
  1207.  
  1208. #module { name = "enc_bcrypt" }
  1209. module { name = "enc_sha256" }
  1210. #module { name = "enc_md5" }
  1211. #module { name = "enc_sha1" }
  1212.  
  1213. /*
  1214. * When using enc_none, passwords will be stored without encryption. This isn't secure
  1215. * therefore it is not recommended.
  1216. */
  1217. #module { name = "enc_none" }
  1218.  
  1219. /*
  1220. * enc_old is Anope's previous (broken) MD5 implementation used from 1.4.x to 1.7.16.
  1221. * If your databases were made using that module, load it here to allow conversion to the primary
  1222. * encryption method.
  1223. */
  1224. #module { name = "enc_old" }
  1225.  
  1226.  
  1227. /* Extra (optional) modules. */
  1228. include
  1229. {
  1230. type = "file"
  1231. name = "modules.example.conf"
  1232. }
  1233.  
  1234. /*
  1235. * Chanstats module.
  1236. * Requires a MySQL Database.
  1237. */
  1238. #include
  1239. {
  1240. type = "file"
  1241. name = "chanstats.example.conf"
  1242. }
  1243.  
  1244. /*
  1245. * IRC2SQL Gateway
  1246. * This module collects data about users, channels and servers. It doesn't build stats
  1247. * itself, however, it gives you the database, it's up to you how you use it.
  1248. *
  1249. * Requires a MySQL Database and MySQL version 5.5 or higher
  1250. */
  1251. #include
  1252. {
  1253. type = "file"
  1254. name = "irc2sql.example.conf"
  1255. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement