API tools faq
paste
Advertisement
Guest User

atheme.conf

a guest
Jan 10th, 2018
56
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 78.48 KB | None | 0 0
raw download clone embed print report
  1. /* This is an example configuration for Services.
  2. *
  3. * All statements end in semi-colons (';').
  4. * Shell style, C style, and C++ style comments may be used.
  5. *
  6. * Items marked with "(*)" are reconfigurable at runtime via REHASH.
  7. */
  8.  
  9. /******************************************************************************
  10. * MODULES SECTION. *
  11. ******************************************************************************/
  12.  
  13. /*
  14. * These are the modules included with the core distribution of Services.
  15. *
  16. * You may be interested in the atheme community modules distribution as
  17. * well, which adds additional features that may or may not be compatible
  18. * with the project paradigms intended for maintainance of the core of
  19. * atheme-services.
  20. *
  21. * Visit the atheme-services website for more information and to download them.
  22. *
  23. * Modules marked [experimental] will taint your atheme-services instance. Do
  24. * not file any bug reports with us about using Services with those modules;
  25. * they will be ignored.
  26. */
  27.  
  28. /* Dynamic security modules.
  29. *
  30. * WARNING: If you select one of these modules, the default security policy included
  31. * with Atheme may break. These modules are intended for people who know what they
  32. * are doing and understand the implications of what they do. Security modules which
  33. * are likely to break the default policy are prefixed with [!], if you are new to
  34. * Atheme, you should avoid enabling them.
  35. *
  36. * If you find your security policy is broken, you may debug it while allowing normal
  37. * operation of your IRC network by putting Atheme into "permissive mode". To do this,
  38. * enable general::permissive_mode.
  39. *
  40. * [!] Infer "command:" namespace permissions modules/security/cmdperm
  41. */
  42. loadmodule "modules/security/cmdperm";
  43.  
  44. /* Protocol module.
  45. *
  46. * Please select a protocol module. Different servers use different protocols.
  47. * Below is a listing of ircd's known to work with the various protocol modules
  48. * available.
  49. *
  50. * Asuka 1.2.1 or later modules/protocol/asuka
  51. * Bahamut 1.8.x modules/protocol/bahamut
  52. * Charybdis IRCd modules/protocol/charybdis
  53. * DreamForge 4.6.7 or later modules/protocol/dreamforge
  54. * InspIRCd 2.0 modules/protocol/inspircd
  55. * ircd-ratbox 2.0 and later modules/protocol/ratbox
  56. * IRCNet ircd (ircd 2.11) modules/protocol/ircnet
  57. * ircd-seven modules/protocol/ircd-seven
  58. * Nefarious IRCu 0.4.0 or later modules/protocol/nefarious
  59. * ngIRCd 19 or later [experimental] modules/protocol/ngircd
  60. * UnrealIRCd 3.2.* modules/protocol/unreal
  61. * UnrealIRCd 4 or later modules/protocol/unreal4
  62. *
  63. * If your IRCd vendor has supplied a module file, build it and load it here
  64. * instead of one above.
  65. */
  66. loadmodule "modules/protocol/inspircd";
  67.  
  68. /* Protocol mixins.
  69. *
  70. * These should be used if you do not have/want certain features on your
  71. * network that your ircd normally has. If you do not know what this means,
  72. * you do not need any of them.
  73. *
  74. * Disable halfops modules/protocol/mixin_nohalfops
  75. * Disable holdnick (use enforcer clients) modules/protocol/mixin_noholdnick
  76. * Disable "protect" mode on channels modules/protocol/mixin_noprotect
  77. * Disable "owner" mode on channels modules/protocol/mixin_noowner
  78. */
  79. #loadmodule "modules/protocol/mixin_nohalfops";
  80. #loadmodule "modules/protocol/mixin_noholdnick";
  81. #loadmodule "modules/protocol/mixin_noprotect";
  82. #loadmodule "modules/protocol/mixin_noowner";
  83.  
  84. /* Database backend module.
  85. *
  86. * Please select a database backend module. Different backends allow for
  87. * different ways in which the services data can be manipulated. YOU MAY
  88. * ONLY HAVE ONE OF THESE BACKENDS LOADED.
  89. *
  90. * The following backends are available:
  91. *
  92. * Atheme 0.1 flatfile database format modules/backend/flatfile
  93. * Open Services Exchange database format modules/backend/opensex
  94. *
  95. * Most networks will want opensex.
  96. */
  97. loadmodule "modules/backend/opensex";
  98.  
  99. /* Crypto module.
  100. *
  101. * If you would like encryption for your services passwords, please
  102. * select a module here. Note that upon starting with a crypto module
  103. * YOUR PASSWORDS ARE IMMEDIATELY AND IRREVERSIBLY CONVERTED. Make at
  104. * least TWO backups of your database before experimenting with this.
  105. * If you have several thousand accounts, this conversion may take
  106. * appreciable time.
  107. *
  108. * The following crypto modules are available:
  109. *
  110. * PBKDF2 cryptography (new, recommended) modules/crypto/pbkdf2v2
  111. * PBKDF2 cryptography (old, compatibility) modules/crypto/pbkdf2
  112. * POSIX-style crypt(3) modules/crypto/posix
  113. * IRCServices (also Anope etc) compatibility modules/crypto/ircservices
  114. * Raw MD5 (Anope compatibility) modules/crypto/rawmd5
  115. * Raw SHA1 (Anope compatibility) modules/crypto/rawsha1
  116. *
  117. * The ircservices, rawmd5 and rawsha1 modules are only recommended for use with
  118. * a database converted from other services with password encryption.
  119. *
  120. * To transition between crypto schemes, load the preferred scheme first
  121. * and as users login, they will be migrated to the new preferred scheme. Like:
  122. * loadmodule "modules/crypto/pbkdf2v2";
  123. * loadmodule "modules/crypto/pbkdf2";
  124. * loadmodule "modules/crypto/posix";
  125. * loadmodule "modules/crypto/ircservices";
  126. *
  127. * The rawsha1 and pbkdf2/pbkdf2v2 modules require OpenSSL.
  128. */
  129. #loadmodule "modules/crypto/pbkdf2v2";
  130. loadmodule "modules/crypto/posix";
  131.  
  132. /* Authentication module.
  133. *
  134. * These allow using passwords from an external system. The password given
  135. * when registering a new account is also checked against the external
  136. * system.
  137. *
  138. * The following authentication modules are available:
  139. *
  140. * LDAP modules/auth/ldap
  141. *
  142. * The LDAP module requires OpenLDAP client libraries. It uses them in a
  143. * synchronous manner, which means that an unresponsive LDAP server can
  144. * freeze services.
  145. */
  146. #loadmodule "modules/auth/ldap";
  147.  
  148. /* NickServ modules.
  149. *
  150. * Here you can disable or enable certain features of NickServ, by
  151. * defining which modules are loaded. You can even disable NickServ
  152. * entirely. Please note however, that an authentication service
  153. * (either NickServ, or UserServ) is required for proper functionality.
  154. *
  155. * The CrackLib password validation module requires CrackLib to be
  156. * installed on your system in order to use.
  157. *
  158. * Core components modules/nickserv/main
  159. * Nickname access lists modules/nickserv/access
  160. * Bad email address blocking modules/nickserv/badmail
  161. * CertFP fingerprint managment modules/nickserv/cert
  162. * CrackLib password validation modules/nickserv/cracklib
  163. * DROP command modules/nickserv/drop
  164. * Nickname enforcement modules/nickserv/enforce
  165. * GHOST command modules/nickserv/ghost
  166. * GROUP and UNGROUP commands modules/nickserv/group
  167. * HELP command modules/nickserv/help
  168. * Nickname expiry override (HOLD command) modules/nickserv/hold
  169. * IDENTIFY command modules/nickserv/identify
  170. * INFO command modules/nickserv/info
  171. * Last quit message in INFO modules/nickserv/info_lastquit
  172. * LIST command modules/nickserv/list
  173. * LISTMAIL command modules/nickserv/listmail
  174. * LISTOWNMAIL command modules/nickserv/listownmail
  175. * LOGIN command (for no_nick_ownership) modules/nickserv/login
  176. * LOGOUT command modules/nickserv/logout
  177. * MARK command modules/nickserv/mark
  178. * FREEZE command modules/nickserv/freeze
  179. * LISTCHANS command modules/nickserv/listchans
  180. * LISTGROUPS command modules/nickserv/listgroups
  181. * REGISTER command modules/nickserv/register
  182. * Bypass registration limits (REGNOLIMIT) modules/nickserv/regnolimit
  183. * Password reset (RESETPASS command) modules/nickserv/resetpass
  184. * RESTRICT command modules/nickserv/restrict
  185. * Password return (RETURN command) modules/nickserv/return
  186. * Password retrieval (SENDPASS command) modules/nickserv/sendpass
  187. * Password retrieval allowed to normal users modules/nickserv/sendpass_user
  188. * SET command core modules/nickserv/set_core
  189. * Change primary nickname (SET ACCOUNTNAME) modules/nickserv/set_accountname
  190. * SET EMAIL command modules/nickserv/set_email
  191. * SET EMAILMEMOS command modules/nickserv/set_emailmemos
  192. * SET ENFORCETIME command modules/nickserv/set_enforcetime
  193. * SET HIDEMAIL command modules/nickserv/set_hidemail
  194. * SET LANGUAGE command modules/nickserv/set_language
  195. * SET NEVERGROUP command modules/nickserv/set_nevergroup
  196. * SET NEVEROP command modules/nickserv/set_neverop
  197. * SET NOGREET command modules/nickserv/set_nogreet
  198. * SET NOMEMO command modules/nickserv/set_nomemo
  199. * SET NOOP command modules/nickserv/set_noop
  200. * SET NOPASSWORD command modules/nickserv/set_nopassword
  201. * SET PASSWORD command modules/nickserv/set_password
  202. * PRIVMSG instead of NOTICE (SET PRIVMSG cmd) modules/nickserv/set_privmsg
  203. * Account info hiding (SET PRIVATE command) modules/nickserv/set_private
  204. * SET PROPERTY command modules/nickserv/set_property
  205. * SET PUBKEY command modules/nickserv/set_pubkey
  206. * SET QUIETCHG command modules/nickserv/set_quietchg
  207. * Password retrieval uses code (SETPASS cmd) modules/nickserv/setpass
  208. * STATUS command modules/nickserv/status
  209. * Nickname metadata viewer (TAXONOMY command) modules/nickserv/taxonomy
  210. * VACATION command modules/nickserv/vacation
  211. * VERIFY command modules/nickserv/verify
  212. * VHOST command modules/nickserv/vhost
  213. */
  214. loadmodule "modules/nickserv/main";
  215. loadmodule "modules/nickserv/access";
  216. loadmodule "modules/nickserv/badmail";
  217. loadmodule "modules/nickserv/cert";
  218. loadmodule "modules/nickserv/cracklib";
  219. loadmodule "modules/nickserv/drop";
  220. loadmodule "modules/nickserv/enforce";
  221. loadmodule "modules/nickserv/ghost";
  222. loadmodule "modules/nickserv/group";
  223. loadmodule "modules/nickserv/help";
  224. loadmodule "modules/nickserv/hold";
  225. loadmodule "modules/nickserv/identify";
  226. loadmodule "modules/nickserv/info";
  227. loadmodule "modules/nickserv/info_lastquit";
  228. loadmodule "modules/nickserv/list";
  229. loadmodule "modules/nickserv/listmail";
  230. loadmodule "modules/nickserv/listownmail";
  231. loadmodule "modules/nickserv/login";
  232. loadmodule "modules/nickserv/logout";
  233. loadmodule "modules/nickserv/mark";
  234. loadmodule "modules/nickserv/freeze";
  235. loadmodule "modules/nickserv/listchans";
  236. loadmodule "modules/nickserv/listgroups";
  237. loadmodule "modules/nickserv/register";
  238. loadmodule "modules/nickserv/regnolimit";
  239. loadmodule "modules/nickserv/resetpass";
  240. loadmodule "modules/nickserv/restrict";
  241. loadmodule "modules/nickserv/return";
  242. loadmodule "modules/nickserv/setpass";
  243. loadmodule "modules/nickserv/sendpass";
  244. loadmodule "modules/nickserv/sendpass_user";
  245. loadmodule "modules/nickserv/set_core";
  246. loadmodule "modules/nickserv/set_accountname";
  247. loadmodule "modules/nickserv/set_email";
  248. loadmodule "modules/nickserv/set_emailmemos";
  249. #loadmodule "modules/nickserv/set_enforcetime";
  250. loadmodule "modules/nickserv/set_hidemail";
  251. loadmodule "modules/nickserv/set_language";
  252. loadmodule "modules/nickserv/set_nevergroup";
  253. loadmodule "modules/nickserv/set_neverop";
  254. loadmodule "modules/nickserv/set_nogreet";
  255. loadmodule "modules/nickserv/set_nomemo";
  256. loadmodule "modules/nickserv/set_noop";
  257. loadmodule "modules/nickserv/set_password";
  258. #loadmodule "modules/nickserv/set_privmsg";
  259. #loadmodule "modules/nickserv/set_private";
  260. loadmodule "modules/nickserv/set_property";
  261. loadmodule "modules/nickserv/set_pubkey";
  262. loadmodule "modules/nickserv/set_quietchg";
  263. loadmodule "modules/nickserv/status";
  264. loadmodule "modules/nickserv/taxonomy";
  265. loadmodule "modules/nickserv/vacation";
  266. loadmodule "modules/nickserv/verify";
  267. loadmodule "modules/nickserv/vhost";
  268.  
  269. /* ChanServ modules.
  270. *
  271. * Here you can disable or enable certain features of ChanServ, by
  272. * defining which modules are loaded. You can even disable ChanServ
  273. * entirely. Please note that ChanServ requires an authentication
  274. * service, either NickServ or UserServ will do.
  275. *
  276. * Core components modules/chanserv/main
  277. * ACCESS command (simplified ACL editing) modules/chanserv/access
  278. * AKICK command modules/chanserv/akick
  279. * BAN/UNBAN commands modules/chanserv/ban
  280. * UNBAN self only (load ban or this not both) modules/chanserv/unban_self
  281. * CLOSE command modules/chanserv/close
  282. * CLONE command modules/chanserv/clone
  283. * CLEAR command modules/chanserv/clear
  284. * CLEAR AKICKS command modules/chanserv/clear_akicks
  285. * CLEAR BANS command modules/chanserv/clear_bans
  286. * CLEAR FLAGS command modules/chanserv/clear_flags
  287. * CLEAR USERS command modules/chanserv/clear_users
  288. * COUNT command modules/chanserv/count
  289. * DROP command modules/chanserv/drop
  290. * Forced flags changes modules/chanserv/fflags
  291. * FLAGS command modules/chanserv/flags
  292. * Forced foundership transfers modules/chanserv/ftransfer
  293. * GETKEY command modules/chanserv/getkey
  294. * HALFOP/DEHALFOP commands modules/chanserv/halfop
  295. * HELP command modules/chanserv/help
  296. * Channel expiry override (HOLD command) modules/chanserv/hold
  297. * INFO command modules/chanserv/info
  298. * INVITE command modules/chanserv/invite
  299. * KICK/KICKBAN commands modules/chanserv/kick
  300. * LIST command modules/chanserv/list
  301. * MARK command modules/chanserv/mark
  302. * Moderated channel registrations modules/chanserv/moderate
  303. * OP/DEOP commands modules/chanserv/op
  304. * OWNER/DEOWNER commands modules/chanserv/owner
  305. * PROTECT/DEPROTECT commands modules/chanserv/protect
  306. * QUIET command (+q support) modules/chanserv/quiet
  307. * Channel takeover recovery (RECOVER command) modules/chanserv/recover
  308. * REGISTER command modules/chanserv/register
  309. * SET command core modules/chanserv/set_core
  310. * SET EMAIL command modules/chanserv/set_email
  311. * SET ENTRYMSG command modules/chanserv/set_entrymsg
  312. * SET FANTASY command modules/chanserv/set_fantasy
  313. * SET GAMESERV command modules/chanserv/set_gameserv
  314. * SET GUARD command modules/chanserv/set_guard
  315. * SET KEEPTOPIC command modules/chanserv/set_keeptopic
  316. * SET LIMITFLAGS command modules/chanserv/set_limitflags
  317. * SET MLOCK command modules/chanserv/set_mlock
  318. * SET PREFIX command modules/chanserv/set_prefix
  319. * Channel info hiding (SET PRIVATE command) modules/chanserv/set_private
  320. * SET PROPERTY command modules/chanserv/set_property
  321. * SET PUBACL command modules/chanserv/set_pubacl
  322. * SET RESTRICTED command modules/chanserv/set_restricted
  323. * SET SECURE command modules/chanserv/set_secure
  324. * SET TOPICLOCK command modules/chanserv/set_topiclock
  325. * SET URL command modules/chanserv/set_url
  326. * SET VERBOSE command modules/chanserv/set_verbose
  327. * STATUS command modules/chanserv/status
  328. * SYNC command (and automatic ACL syncing) modules/chanserv/sync
  329. * Named Successor ACL flag modules/chanserv/successor_acl
  330. * Channel metadata viewer (TAXONOMY command) modules/chanserv/taxonomy
  331. * TEMPLATE command modules/chanserv/template
  332. * TOPIC/TOPICAPPEND commands modules/chanserv/topic
  333. * VOICE/DEVOICE commands modules/chanserv/voice
  334. * WHY command modules/chanserv/why
  335. * VOP/HOP/AOP/SOP commands modules/chanserv/xop
  336. * This module provides emulation of the ircservices XOP scheme ONLY.
  337. * Do not report discrepencies when using native commands to edit channel
  338. * ACLs. This is intentional.
  339. * Flood protection modules/chanserv/antiflood
  340. * This module should be loaded after at least chanserv/quiet if you want
  341. * the autoquiet feature to work.
  342. */
  343. loadmodule "modules/chanserv/main";
  344. loadmodule "modules/chanserv/access";
  345. loadmodule "modules/chanserv/akick";
  346. loadmodule "modules/chanserv/ban";
  347. #loadmodule "modules/chanserv/unban_self";
  348. loadmodule "modules/chanserv/clone";
  349. loadmodule "modules/chanserv/close";
  350. loadmodule "modules/chanserv/clear";
  351. loadmodule "modules/chanserv/clear_akicks";
  352. loadmodule "modules/chanserv/clear_bans";
  353. loadmodule "modules/chanserv/clear_flags";
  354. loadmodule "modules/chanserv/clear_users";
  355. loadmodule "modules/chanserv/count";
  356. loadmodule "modules/chanserv/drop";
  357. #loadmodule "modules/chanserv/fflags";
  358. loadmodule "modules/chanserv/flags";
  359. loadmodule "modules/chanserv/ftransfer";
  360. loadmodule "modules/chanserv/getkey";
  361. #loadmodule "modules/chanserv/halfop";
  362. loadmodule "modules/chanserv/help";
  363. loadmodule "modules/chanserv/hold";
  364. loadmodule "modules/chanserv/info";
  365. loadmodule "modules/chanserv/invite";
  366. loadmodule "modules/chanserv/kick";
  367. loadmodule "modules/chanserv/list";
  368. loadmodule "modules/chanserv/mark";
  369. #loadmodule "modules/chanserv/moderate";
  370. loadmodule "modules/chanserv/op";
  371. #loadmodule "modules/chanserv/owner";
  372. #loadmodule "modules/chanserv/protect";
  373. #loadmodule "modules/chanserv/quiet";
  374. loadmodule "modules/chanserv/recover";
  375. loadmodule "modules/chanserv/register";
  376. loadmodule "modules/chanserv/set_core";
  377. loadmodule "modules/chanserv/set_email";
  378. loadmodule "modules/chanserv/set_entrymsg";
  379. loadmodule "modules/chanserv/set_fantasy";
  380. #loadmodule "modules/chanserv/set_gameserv";
  381. loadmodule "modules/chanserv/set_guard";
  382. loadmodule "modules/chanserv/set_keeptopic";
  383. #loadmodule "modules/chanserv/set_limitflags";
  384. loadmodule "modules/chanserv/set_mlock";
  385. loadmodule "modules/chanserv/set_prefix";
  386. #loadmodule "modules/chanserv/set_private";
  387. loadmodule "modules/chanserv/set_property";
  388. #loadmodule "modules/chanserv/set_pubacl";
  389. loadmodule "modules/chanserv/set_restricted";
  390. loadmodule "modules/chanserv/set_secure";
  391. loadmodule "modules/chanserv/set_topiclock";
  392. loadmodule "modules/chanserv/set_url";
  393. loadmodule "modules/chanserv/set_verbose";
  394. loadmodule "modules/chanserv/status";
  395. loadmodule "modules/chanserv/sync";
  396. #loadmodule "modules/chanserv/successor_acl";
  397. loadmodule "modules/chanserv/taxonomy";
  398. loadmodule "modules/chanserv/template";
  399. loadmodule "modules/chanserv/topic";
  400. loadmodule "modules/chanserv/voice";
  401. loadmodule "modules/chanserv/why";
  402. #loadmodule "modules/chanserv/xop";
  403. loadmodule "modules/chanserv/antiflood";
  404.  
  405. /* CHANFIX module.
  406. *
  407. * Here you can disable or enable certain features of CHANFIX, by
  408. * defining which modules are loaded.
  409. *
  410. * Core components modules/chanfix/main
  411. */
  412. loadmodule "modules/chanfix/main";
  413.  
  414. /* OperServ modules.
  415. *
  416. * Here you can disable or enable certain features of OperServ, by
  417. * defining which modules are loaded.
  418. *
  419. * Core components modules/operserv/main
  420. * AKILL system modules/operserv/akill
  421. * CLEARCHAN command modules/operserv/clearchan
  422. * CLONES system modules/operserv/clones
  423. * COMPARE command modules/operserv/compare
  424. * GREPLOG command modules/operserv/greplog
  425. * HELP command modules/operserv/help
  426. * IGNORE system modules/operserv/ignore
  427. * IDENTIFY command modules/operserv/identify
  428. * INFO command modules/operserv/info
  429. * INJECT command modules/operserv/inject
  430. * JUPE command modules/operserv/jupe
  431. * MODE command modules/operserv/mode
  432. * MODINSPECT command modules/operserv/modinspect
  433. * MODLIST command modules/operserv/modlist
  434. * MODLOAD command modules/operserv/modload
  435. * MODRELOAD command modules/operserv/modreload
  436. * MODUNLOAD command modules/operserv/modunload
  437. * NOOP system modules/operserv/noop
  438. * Override access (OVERRIDE command) modules/operserv/override
  439. * Regex mass akill (RAKILL command) modules/operserv/rakill
  440. * RAW command modules/operserv/raw
  441. * READONLY command modules/operserv/readonly
  442. * REHASH command modules/operserv/rehash
  443. * RESTART command modules/operserv/restart
  444. * Display regex matching (RMATCH command) modules/operserv/rmatch
  445. * Most common realnames (RNC command) modules/operserv/rnc
  446. * RWATCH system modules/operserv/rwatch
  447. * Temporarily modify config options (SET command) modules/operserv/set
  448. * SGLINE system modules/operserv/sgline
  449. * SHUTDOWN command modules/operserv/shutdown
  450. * Non-config oper privileges (SOPER command) modules/operserv/soper
  451. * Oper privilege display (SPECS command) modules/operserv/specs
  452. * SQLINE system modules/operserv/sqline
  453. * UPDATE command modules/operserv/update
  454. * UPTIME command modules/operserv/uptime
  455. */
  456. loadmodule "modules/operserv/main";
  457. loadmodule "modules/operserv/akill";
  458. #loadmodule "modules/operserv/clearchan";
  459. #loadmodule "modules/operserv/clones";
  460. loadmodule "modules/operserv/compare";
  461. #loadmodule "modules/operserv/greplog";
  462. loadmodule "modules/operserv/help";
  463. loadmodule "modules/operserv/identify";
  464. loadmodule "modules/operserv/ignore";
  465. loadmodule "modules/operserv/info";
  466. loadmodule "modules/operserv/jupe";
  467. loadmodule "modules/operserv/mode";
  468. loadmodule "modules/operserv/modinspect";
  469. loadmodule "modules/operserv/modlist";
  470. loadmodule "modules/operserv/modload";
  471. loadmodule "modules/operserv/modunload";
  472. loadmodule "modules/operserv/modreload";
  473. loadmodule "modules/operserv/noop";
  474. #loadmodule "modules/operserv/override";
  475. #loadmodule "modules/operserv/rakill";
  476. loadmodule "modules/operserv/readonly";
  477. loadmodule "modules/operserv/rehash";
  478. loadmodule "modules/operserv/restart";
  479. loadmodule "modules/operserv/rmatch";
  480. loadmodule "modules/operserv/rnc";
  481. loadmodule "modules/operserv/rwatch";
  482. loadmodule "modules/operserv/set";
  483. loadmodule "modules/operserv/sgline";
  484. loadmodule "modules/operserv/shutdown";
  485. #loadmodule "modules/operserv/soper";
  486. loadmodule "modules/operserv/specs";
  487. loadmodule "modules/operserv/sqline";
  488. loadmodule "modules/operserv/update";
  489. loadmodule "modules/operserv/uptime";
  490.  
  491. /* MemoServ modules.
  492. *
  493. * Here you can disable or enable certain features of MemoServ, by
  494. * defining which modules are loaded. You can even disable MemoServ
  495. * entirely.
  496. *
  497. * Core components modules/memoserv/main
  498. * HELP command modules/memoserv/help
  499. * SEND command modules/memoserv/send
  500. * Channel memos (SENDOPS command) modules/memoserv/sendops
  501. * Group memos (SENDGROUP command) modules/memoserv/sendgroup
  502. * LIST command modules/memoserv/list
  503. * READ command modules/memoserv/read
  504. * FORWARD command modules/memoserv/forward
  505. * DELETE command modules/memoserv/delete
  506. * IGNORE command modules/memoserv/ignore
  507. */
  508. loadmodule "modules/memoserv/main";
  509. loadmodule "modules/memoserv/help";
  510. loadmodule "modules/memoserv/send";
  511. loadmodule "modules/memoserv/sendops";
  512. loadmodule "modules/memoserv/sendgroup";
  513. loadmodule "modules/memoserv/list";
  514. loadmodule "modules/memoserv/read";
  515. loadmodule "modules/memoserv/forward";
  516. loadmodule "modules/memoserv/delete";
  517. loadmodule "modules/memoserv/ignore";
  518.  
  519. /* Global module.
  520. *
  521. * Like the other services, the Global noticer is a module. You can
  522. * disable or enable it to your liking below. Please note that the
  523. * Global noticer is dependent on OperServ for full functionality.
  524. */
  525. loadmodule "modules/global/main";
  526.  
  527. /* InfoServ module.
  528. *
  529. * Like the other services, InfoServ is a module. You can disable or
  530. * enable it to your liking below.
  531. */
  532. loadmodule "modules/infoserv/main";
  533.  
  534. /* SASL agent module.
  535. *
  536. * Allows clients to authenticate to services via SASL with an appropriate
  537. * ircd. You need the core components and at least one mechanism.
  538. *
  539. * Core components modules/saslserv/main
  540. * PLAIN mechanism modules/saslserv/plain
  541. * ECDSA-NIST256p-CHALLENGE modules/saslserv/ecdsa-nist256p-challenge
  542. * AUTHCOOKIE mechanism (for IRIS) modules/saslserv/authcookie
  543. * EXTERNAL mechanism (IRCv3.1+) modules/saslserv/external
  544. *
  545. * ECDSA-NIST256p-CHALLENGE support requires that Atheme be compiled against OpenSSL.
  546. */
  547. loadmodule "modules/saslserv/main";
  548. loadmodule "modules/saslserv/plain";
  549. loadmodule "modules/saslserv/authcookie";
  550. #loadmodule "modules/saslserv/external";
  551. #loadmodule "modules/saslserv/ecdsa-nist256p-challenge"; /* requires SSL */
  552.  
  553. /* GameServ modules.
  554. *
  555. * Here you can disable or enable certain features of GameServ, by
  556. * defining which modules are loaded. You can even disable GameServ
  557. * entirely.
  558. *
  559. * Core components modules/gameserv/main
  560. * DICE/WOD commands modules/gameserv/dice
  561. * EIGHTBALL command modules/gameserv/eightball
  562. * Game-specific dice calculators modules/gameserv/gamecalc
  563. * HELP commands modules/gameserv/help
  564. * LOTTERY command modules/gameserv/lottery
  565. * NAMEGEN command modules/gameserv/namegen
  566. * RPS command modules/gameserv/rps
  567. */
  568. #loadmodule "modules/gameserv/main";
  569. #loadmodule "modules/gameserv/dice";
  570. #loadmodule "modules/gameserv/eightball";
  571. #loadmodule "modules/gameserv/gamecalc";
  572. #loadmodule "modules/gameserv/help";
  573. #loadmodule "modules/gameserv/lottery";
  574. #loadmodule "modules/gameserv/namegen";
  575. #loadmodule "modules/gameserv/rps";
  576.  
  577. /* RPGServ modules.
  578. *
  579. * Here you can disable or enable certain features of RPGServ, by
  580. * defining which modules are loaded. You can even disable RPGServ
  581. * entirely.
  582. *
  583. * Core components modules/rpgserv/main
  584. * ENABLE/DISABLE commands modules/rpgserv/enable
  585. * HELP command modules/rpgserv/help
  586. * INFO command modules/rpgserv/info
  587. * LIST command modules/rpgserv/list
  588. * SEARCH command modules/rpgserv/search
  589. * SET commands modules/rpgserv/set
  590. */
  591. #loadmodule "modules/rpgserv/main";
  592. #loadmodule "modules/rpgserv/enable";
  593. #loadmodule "modules/rpgserv/help";
  594. #loadmodule "modules/rpgserv/info";
  595. #loadmodule "modules/rpgserv/list";
  596. #loadmodule "modules/rpgserv/search";
  597. #loadmodule "modules/rpgserv/set";
  598.  
  599. /* BotServ modules.
  600. *
  601. * Here you can disable or enable certain features of BotServ, by
  602. * defining which modules are loaded. You can even disable BotServ
  603. * entirely.
  604. *
  605. * Core components modules/botserv/main
  606. * HELP command modules/botserv/help
  607. * INFO command modules/botserv/info
  608. * NPC commands (SAY, ACT) modules/botserv/bottalk
  609. * SET command (required for SET commands) modules/botserv/set_core
  610. * SET FANTASY command modules/botserv/set_fantasy
  611. * SET NOBOT command modules/botserv/set_nobot
  612. * SET PRIVATE command modules/botserv/set_private
  613. * SET SAYCALLER command modules/botserv/set_saycaller
  614. */
  615. #loadmodule "modules/botserv/main";
  616. #loadmodule "modules/botserv/help";
  617. #loadmodule "modules/botserv/info";
  618. #loadmodule "modules/botserv/bottalk";
  619. #loadmodule "modules/botserv/set_core";
  620. #loadmodule "modules/botserv/set_fantasy";
  621. #loadmodule "modules/botserv/set_nobot";
  622. #loadmodule "modules/botserv/set_private";
  623. #loadmodule "modules/botserv/set_saycaller";
  624.  
  625. /* HostServ modules.
  626. *
  627. * Here you can disable or enable certain features of HostServ, by
  628. * defining which modules are loaded. You can even disable HostServ
  629. * entirely.
  630. *
  631. * HostServ is a more complex, and optional virtual host management service.
  632. * Users wishing only to set vhosts need not use it (they can use the builtin
  633. * vhost management of NickServ instead).
  634. *
  635. * Core components modules/hostserv/main
  636. * HELP command modules/hostserv/help
  637. * OFFER system modules/hostserv/offer
  638. * ON and OFF commands modules/hostserv/onoff
  639. * REQUEST system modules/hostserv/request
  640. * VHOST and LISTVHOST commands modules/hostserv/vhost
  641. * VHOSTNICK command modules/hostserv/vhostnick
  642. * GROUP command modules/hostserv/group
  643. * DROP command modules/hostserv/drop
  644. */
  645. #loadmodule "modules/hostserv/main";
  646. #loadmodule "modules/hostserv/help";
  647. #loadmodule "modules/hostserv/onoff";
  648. #loadmodule "modules/hostserv/offer";
  649. #loadmodule "modules/hostserv/request";
  650. #loadmodule "modules/hostserv/vhost";
  651. #loadmodule "modules/hostserv/vhostnick";
  652. #loadmodule "modules/hostserv/group";
  653. #loadmodule "modules/hostserv/drop";
  654.  
  655. /* HelpServ modules.
  656. * HelpServ allows users to request help from network staff in a few different ways.
  657. *
  658. * Core components modules/helpserv/main
  659. * HELPME command modules/helpserv/helpme
  660. * Help Ticket system modules/helpserv/ticket
  661. * Service List modules/helpserv/services
  662. *
  663. * The ticket system works like a bugtracker ot helpdesk ticket system, HELPME
  664. * works like a one-time alert. You should probably only load one of the two systems.
  665. */
  666. #loadmodule "modules/helpserv/main";
  667. #loadmodule "modules/helpserv/helpme";
  668. #loadmodule "modules/helpserv/ticket";
  669. #loadmodule "modules/helpserv/services";
  670.  
  671. /* Channel listing service.
  672. *
  673. * Allows users to list channels with more flexibility than the /list
  674. * command.
  675. *
  676. * Core components modules/alis/main
  677. */
  678. #loadmodule "modules/alis/main";
  679.  
  680. /* StatServ module.
  681. * StatServ provides basic statistics and split tracking.
  682. *
  683. * Core components modules/statserv/main
  684. * CHANNEL command modules/statserv/channel
  685. * NETSPLIT command modules/statserv/netsplit
  686. * SERVER command modules/statserv/server
  687. */
  688. loadmodule "modules/statserv/main";
  689. #loadmodule "modules/statserv/channel";
  690. loadmodule "modules/statserv/netsplit";
  691. loadmodule "modules/statserv/server";
  692.  
  693. /* GroupServ module.
  694. * GroupServ allows users to create groups to easily mass-manage channel
  695. * access and more.
  696. *
  697. * Core components modules/groupserv/main
  698. * ACSNOLIMIT command modules/groupserv/acsnolimit
  699. * DROP command modules/groupserv/drop
  700. * FDROP command modules/groupserv/fdrop
  701. * FFLAGS command modules/groupserv/fflags
  702. * FLAGS command modules/groupserv/flags
  703. * HELP command modules/groupserv/help
  704. * INFO command modules/groupserv/info
  705. * JOIN command modules/groupserv/join
  706. * LIST command modules/groupserv/list
  707. * LISTCHANS command modules/groupserv/listchans
  708. * REGISTER command modules/groupserv/register
  709. * REGNOLIMIT command modules/groupserv/regnolimit
  710. * INVITE command modules/groupserv/invite
  711. * SET command modules/groupserv/set
  712. * SET CHANNEL command modules/groupserv/set_channel
  713. * SET DESCRIPTION command modules/groupserv/set_description
  714. * SET EMAIL command modules/groupserv/set_email
  715. * SET GROUPNAME command modules/groupserv/set_groupname
  716. * SET JOINFLAGS command modules/groupserv/set_joinflags
  717. * SET OPEN command modules/groupserv/set_open
  718. * SET PUBLIC command modules/groupserv/set_public
  719. * SET URL command modules/groupserv/set_url
  720. *
  721. */
  722. loadmodule "modules/groupserv/main";
  723. loadmodule "modules/groupserv/acsnolimit";
  724. loadmodule "modules/groupserv/drop";
  725. loadmodule "modules/groupserv/fdrop";
  726. loadmodule "modules/groupserv/fflags";
  727. loadmodule "modules/groupserv/flags";
  728. loadmodule "modules/groupserv/help";
  729. loadmodule "modules/groupserv/info";
  730. loadmodule "modules/groupserv/join";
  731. loadmodule "modules/groupserv/list";
  732. loadmodule "modules/groupserv/listchans";
  733. loadmodule "modules/groupserv/register";
  734. loadmodule "modules/groupserv/regnolimit";
  735. #loadmodule "modules/groupserv/invite";
  736. loadmodule "modules/groupserv/set";
  737. loadmodule "modules/groupserv/set_channel";
  738. loadmodule "modules/groupserv/set_description";
  739. loadmodule "modules/groupserv/set_email";
  740. loadmodule "modules/groupserv/set_groupname";
  741. loadmodule "modules/groupserv/set_joinflags";
  742. loadmodule "modules/groupserv/set_open";
  743. loadmodule "modules/groupserv/set_public";
  744. loadmodule "modules/groupserv/set_url";
  745.  
  746. /*
  747. * Various modules.
  748. *
  749. * Atheme includes an optional HTTP server that can be used for integration
  750. * with portal software and other useful things. To enable it, load this
  751. * module, and uncomment the httpd { } block towards the bottom of the config.
  752. *
  753. * HTTP Server modules/misc/httpd
  754. */
  755. loadmodule "modules/misc/httpd";
  756.  
  757. /* XMLRPC server module.
  758. *
  759. * The XML-RPC handler requires modules/misc/httpd to be loaded as it merely
  760. * registers a path handler for XML-RPC. The path used for XML-RPC is /xmlrpc.
  761. *
  762. * XMLRPC handler for the httpd modules/transport/xmlrpc
  763. */
  764. loadmodule "modules/transport/xmlrpc";
  765.  
  766. /* Extended target entity types. [EXPERIMENTAL]
  767. *
  768. * Atheme can set up special target mapping entities which match multiple
  769. * users in channel access entries. These target mapping entity types are
  770. * defined through the 'exttarget' modules listed below.
  771. *
  772. * Exttarget handling core modules/exttarget/main
  773. * $oper exttarget match type modules/exttarget/oper
  774. * $registered exttarget match type modules/exttarget/registered
  775. * $channel exttarget match type modules/exttarget/channel
  776. * $chanacs exttarget match type modules/exttarget/chanacs
  777. * $server exttarget match type modules/exttarget/server
  778. */
  779. #loadmodule "modules/exttarget/main";
  780. #loadmodule "modules/exttarget/oper";
  781. #loadmodule "modules/exttarget/registered";
  782. #loadmodule "modules/exttarget/channel";
  783. #loadmodule "modules/exttarget/chanacs";
  784. #loadmodule "modules/exttarget/server";
  785.  
  786. /* Proxyscan (DNSBL) modules.
  787. *
  788. * Atheme can also check set DNS Blacklists for matches and respond
  789. * as set. Activate modules here and customize further down under Proxyscan
  790. * section.
  791. */
  792. #loadmodule "modules/proxyscan/main";
  793. #loadmodule "modules/proxyscan/dnsbl";
  794.  
  795. /* Other modules.
  796. *
  797. * Put any other modules you want to load on startup here. The path
  798. * is relative to PREFIX or PREFIX/lib/atheme, depending on how Atheme
  799. * was compiled.
  800. */
  801. #loadmodule "modules/contrib/ns_listlogins";
  802.  
  803. /******************************************************************************
  804. * SERVICES RUNTIME CONFIGURATION SECTION. *
  805. ******************************************************************************/
  806.  
  807. /*
  808. * If you are using the crypto/pbkdf2v2 module, you may wish to edit this block
  809. *
  810. * It is recommended to either leave the values at the defaults, or experiment
  811. * with them so that it takes approximately 1 second for users to identify.
  812. */
  813. pbkdf2v2 {
  814.  
  815. /* digest
  816. * Valid values are "SHA256" and "SHA512"
  817. * The default is "SHA512"
  818. */
  819. #digest = "SHA512";
  820.  
  821. /* rounds
  822. * Valid values are 10000 to 5000000 (inclusive)
  823. * The default is 64000
  824. */
  825. #rounds = 64000;
  826. };
  827.  
  828. /* The serverinfo{} block defines how we appear on the IRC network. */
  829. serverinfo {
  830. /* name
  831. * The server name that this program uses on the IRC network.
  832. * This is the name you'll have to use in C:/N:Lines. It must be
  833. * unique on the IRC network and contain at least one dot, but does
  834. * not have to be equal to any DNS name.
  835. */
  836. name = "services.int";
  837.  
  838. /* desc
  839. * The ``server comment'' we send to the IRC network.
  840. */
  841. desc = "Atheme IRC Services";
  842.  
  843. /* numeric
  844. * Some protocol drivers (Charybdis, Ratbox2, P10, IRCNet)
  845. * require a server id, also known as a numeric. Please consult your
  846. * ircd's documentation when providing this value.
  847. */
  848. numeric = "00A";
  849.  
  850. /* (*)recontime
  851. * The number of seconds before we reconnect to the uplink.
  852. */
  853. recontime = 10;
  854.  
  855. /* (*)netname
  856. * The name of your network.
  857. */
  858. netname = "misconfigured network";
  859.  
  860. /* (*)hidehostsuffix
  861. * P10 +x host hiding gives <account>.<hidehostsuffix>.
  862. * If using +x on asuka, this must agree
  863. * with F:HIDDEN_HOST.
  864. */
  865. hidehostsuffix = "users.misconfigured";
  866.  
  867. /* (*)adminname
  868. * The name of the person running this service.
  869. */
  870. adminname = "misconfigured admin";
  871.  
  872. /* (*)adminemail
  873. * The email address of the person running this service.
  874. */
  875. adminemail = "misconfigured@admin.tld";
  876.  
  877. /* (*)registeremail
  878. * The email address that messages should be originated from.
  879. * If this is not set, then "noreply.$adminemail" will be used.
  880. */
  881. registeremail = "noreply@admin.tld";
  882.  
  883. /* (*)hidden
  884. * If this is enabled, Atheme will indicate to the uplink IRCd
  885. * that it should not be included in /links output. This only works
  886. * on the following IRCds at present: charybdis, ircd-seven, ratbox.
  887. */
  888. #hidden;
  889.  
  890. /* (*)mta
  891. * The full path to your mail transfer agent.
  892. * This is used for email authorization and password retrieval.
  893. * Comment this out to disable sending email.
  894. * Warning: sending email can disclose the IP of your services
  895. * unless you take precautions (not discussed here further).
  896. */
  897. mta = "/usr/sbin/sendmail";
  898.  
  899. /* (*)loglevel
  900. * Specify the default categories of logging information to record
  901. * in the master Atheme logfile, usually var/atheme.log.
  902. *
  903. * Options include:
  904. * debug, all - meta-keyword for all possible categories
  905. * trace - meta-keyword for a little bit of info
  906. * misc - like trace, but with some more miscellaneous info
  907. * notice - meta-keyword for notice-like information
  908. * ------------------------------------------------------------------------------
  909. * error - critical errors
  910. * info - miscillaneous log notices
  911. * verbose - A bit more verbose than info, not quite as spammy as debug
  912. * commands - all command use
  913. * admin - administrative command use
  914. * register - account and channel registrations
  915. * set - changes of account or channel settings
  916. * request - user requests (currently only vhosts)
  917. * network - log notices related to network status
  918. * rawdata - log raw data sent and received by services
  919. * wallops - <not yet used>
  920. */
  921. loglevel = { error; info; admin; network; wallops; };
  922.  
  923. /* (*)maxlogins
  924. * What is the maximum number of sessions allowed to login to one
  925. * username? This reduces potential abuse. It is only checked on login.
  926. */
  927. maxlogins = 5;
  928.  
  929. /* (*)maxusers
  930. * What are the maximum usernames that one email address can register?
  931. * Set to 0 to disable this check (it can be slow currently).
  932. */
  933. maxusers = 5;
  934.  
  935. /* (*)mdlimit
  936. * How many metadata entries can be added to an object?
  937. */
  938. mdlimit = 30;
  939.  
  940. /* (*)emaillimit, emailtime
  941. * The maximum number of emails allowed to be sent in
  942. * that amount of time (seconds). If this is exceeded,
  943. * wallops will be sent, at most one per minute.
  944. */
  945. emaillimit = 10;
  946. emailtime = 300;
  947.  
  948. /* (*)auth
  949. * What type of username registration authorization do you want?
  950. * If "email", Atheme will send a confirmation email to the address to
  951. * ensure it's valid. If registration is not completed within one day,
  952. * the username will expire. If "none", no message will be sent and
  953. * the username will be fully registered.
  954. * Valid values are: email, none.
  955. */
  956. auth = none;
  957.  
  958. /* casemapping
  959. * Specify the casemapping to use. Almost all TSora (and any that follow
  960. * the RFC correctly) ircds will use rfc1459 casemapping. Bahamut, Unreal,
  961. * and other ``Dalnet'' ircds will use ascii casemapping.
  962. * Valid values are: rfc1459, ascii.
  963. */
  964. casemapping = rfc1459;
  965. };
  966.  
  967. /* uplink{} blocks define connections to IRC servers.
  968. * Multiple may be defined but only one will be used at a time (IRC
  969. * being a tree shaped network). Atheme does not currently link over SSL.
  970. * To link Atheme over ssl, please connect Atheme to a local ircd and have that
  971. * connect to your network over SSL.
  972. */
  973. uplink "services.pakmastichat.com" {
  974. // The server name of the ircd you're linking to goes above.
  975.  
  976. // host
  977. // The hostname to connect to.
  978. host = "80.211.182.138";
  979.  
  980. // vhost
  981. // The source IP to connect from, used on machines with multiple interfaces.
  982. #vhost = "192.0.2.5";
  983.  
  984. // send_password
  985. // The password sent for linking.
  986. send_password = "password";
  987.  
  988. // receive_password
  989. // The password received for linking.
  990. receive_password = "password";
  991.  
  992. // port
  993. // The port to connect to.
  994. port = 7000;
  995. };
  996.  
  997. /* this is an example for using an IPv6 address as an uplink */
  998. uplink "irc6.example.net" {
  999. host = "::1";
  1000.  
  1001. // password
  1002. // If you want to have same send_password and accept_password, you
  1003. // can specify both using 'password' instead of individually.
  1004. password = "linkage";
  1005.  
  1006. port = 6667;
  1007. };
  1008.  
  1009. /* Services configuration.
  1010. *
  1011. * Each of these blocks can contain a nick, user, host, real and aliases.
  1012. * Several of them also have options specific to the service.
  1013. */
  1014.  
  1015. /* NickServ configuration.
  1016. *
  1017. * The nickserv {} block contains settings specific to the NickServ modules.
  1018. *
  1019. * NickServ provides nickname or username registration and authentication
  1020. * services. It provides necessary authentication features required for
  1021. * Services to operate correctly. You should make sure these settings
  1022. * are properly configured for your network.
  1023. */
  1024. nickserv {
  1025. /* (*)spam
  1026. * Have NickServ tell people about how great it and ChanServ are.
  1027. */
  1028. spam;
  1029.  
  1030. /* no_nick_ownership
  1031. * Enable this to disable nickname ownership (old userserv{}).
  1032. * This changes changes "nickname" to "account" in most messages,
  1033. * disables GHOST on users not logged in to the same account and
  1034. * makes the spam directive ineffective.
  1035. * It is suggested that the nick be set to UserServ, login.so
  1036. * be loaded instead of identify.so and ghost.so not be loaded.
  1037. */
  1038. #no_nick_ownership;
  1039.  
  1040. /* (*)nick
  1041. * The nickname we want NickServ to have.
  1042. */
  1043. nick = "NickServ";
  1044.  
  1045. /* (*)user
  1046. * The username we want NickServ to have.
  1047. */
  1048. user = "NickServ";
  1049.  
  1050. /* (*)host
  1051. * The hostname we want NickServ to have.
  1052. */
  1053. host = "services.int";
  1054.  
  1055. /* (*)real
  1056. * The realname (gecos) information we want NickServ to have.
  1057. */
  1058. real = "Nickname Services";
  1059.  
  1060. /* (*)aliases
  1061. * Command aliases for NickServ.
  1062. */
  1063. aliases {
  1064. "ID" = "IDENTIFY";
  1065. "MYACCESS" = "LISTCHANS";
  1066. };
  1067.  
  1068. /* (*)access
  1069. * This block allows you to modify the access level required to run
  1070. * commands. The list of possible accesses are listed in the operclass
  1071. * section later in this .conf . Note that you can only set the access
  1072. * on an actual command, not an alias.
  1073. */
  1074. access {
  1075. };
  1076.  
  1077. /* (*)maxnicks
  1078. * If GROUP is loaded, what are the maximum nicknames that one
  1079. * username can register?
  1080. */
  1081. maxnicks = 5;
  1082.  
  1083. /* (*)expire
  1084. * The number of days before inactive registrations are expired.
  1085. */
  1086. expire = 30;
  1087.  
  1088. /* (*)enforce_expire
  1089. * The number of days of no use after which to ignore enforcement
  1090. * settings on nicks.
  1091. */
  1092. #enforce_expire = 14;
  1093.  
  1094. /* (*)enforce_delay
  1095. * The number of seconds to delay nickchange enforcement settings
  1096. * on nicks.
  1097. */
  1098. #enforce_delay = 30;
  1099.  
  1100. /* (*)enforce_prefix
  1101. * The prefix to use when changing the user's nick on enforcement
  1102. */
  1103. #enforce_prefix = "Guest";
  1104.  
  1105. /* (*)cracklib_dict
  1106. * The location and filename prefix of the cracklib dictionaries
  1107. * for use with nickserv/cracklib. This must be provided if you are
  1108. * going to be using nickserv/cracklib.
  1109. */
  1110. #cracklib_dict = "/var/cache/cracklib/cracklib_dict";
  1111.  
  1112. /* (*)cracklib_warn
  1113. * If this option is set and nickserv/cracklib is loaded, nickserv will just
  1114. * warn users that their password is insecure, recommend they change it and
  1115. * still register the nick. If this option is unset, it will refuse to
  1116. * register the nick at all until the user chooses a better password.
  1117. */
  1118. #cracklib_warn;
  1119.  
  1120. /* (*)emailexempts
  1121. * A list of email addresses that will be exempt from the check of how many
  1122. * accounts one user may have. Any email address in this block may register
  1123. * an unlimited number of accounts/usernames.
  1124. */
  1125. emailexempts {
  1126. };
  1127. };
  1128.  
  1129. /* ChanServ configuration.
  1130. *
  1131. * The chanserv {} block contains settings specific to the ChanServ modules.
  1132. *
  1133. * ChanServ provides channel registration services, which allows users to own
  1134. * channels. It is not required, but is strongly recommended.
  1135. */
  1136. chanserv {
  1137. /* (*)nick
  1138. * The nickname we want the client to have.
  1139. */
  1140. nick = "ChanServ";
  1141.  
  1142. /* (*)user
  1143. * The username we want the client to have.
  1144. */
  1145. user = "ChanServ";
  1146.  
  1147. /* (*)host
  1148. * The hostname we want the client to have.
  1149. */
  1150. host = "services.int";
  1151.  
  1152. /* (*)real
  1153. * The GECOS of the client.
  1154. */
  1155. real = "Channel Services";
  1156.  
  1157. /* (*)aliases
  1158. * Command aliases for ChanServ.
  1159. */
  1160. aliases {
  1161. };
  1162.  
  1163. /* (*)access
  1164. * Command access changes for ChanServ.
  1165. */
  1166. access {
  1167. };
  1168.  
  1169. /* (*)maxchans
  1170. * What are the maximum channels that one username can register?
  1171. */
  1172. maxchans = 5;
  1173.  
  1174. /* fantasy
  1175. * Do you want to enable fantasy commands? This can
  1176. * use a lot of CPU up, and will only work if you have
  1177. * join_chans (in general) enabled as well.
  1178. */
  1179. fantasy;
  1180.  
  1181. /* (*) hide_xop
  1182. * Hide the XOP templates from sight. This is useful if you
  1183. * want to use templates and not have the XOP templates displayed.
  1184. */
  1185. #hide_xop;
  1186.  
  1187. /* (*) templates
  1188. * Defines what flags the global templates comprise.
  1189. *
  1190. * For the special XOP templates:
  1191. * These should all be different and not equal to the empty set,
  1192. * except that hop may be equal to vop to disable hop.
  1193. * Each subsequent level should have more flags (except +VHO).
  1194. * For optimal functioning of /cs forcexop, aop should not have
  1195. * any of +sRf, hop should not have any of +sRfoOr and vop should
  1196. * not have any of +sRfoOrhHt.
  1197. * If this is not specified, the values of Atheme 0.3 are used,
  1198. * which are generally less intuitive than these.
  1199. * Note: changing these leaves the flags of existing channel access
  1200. * entries unchanged, thus removing them of the view of /cs xop list.
  1201. * Usually the channel founder can use /cs forcexop to update the
  1202. * entries to the new levels.
  1203. *
  1204. * Advice:
  1205. * If you want to add a co-founder role, remove the flags permission
  1206. * from the SOP role, and define a co-founder role with flags
  1207. * permissions.
  1208. */
  1209. templates {
  1210. vop = "+AV";
  1211. hop = "+AHehitrv";
  1212. aop = "+AOehiortv";
  1213. sop = "+AOaefhiorstv";
  1214.  
  1215. founder = "+AFORaefhiorstv";
  1216.  
  1217. /* some examples (which are commented out...) */
  1218. #member = "+Ai";
  1219. #op = "+AOiortv";
  1220. };
  1221.  
  1222. /* (*) deftemplates
  1223. * Defines default templates to set on new channels, as a
  1224. * space-separated list of name=+flags pairs.
  1225. * Note: at this time no syntax checking is done on this; it
  1226. * is your own responsibility to make sure it is correct.
  1227. */
  1228. #deftemplates = "MEMBER=+Ai OP=+AOiortv";
  1229.  
  1230. /* (*) changets
  1231. * Change the channel TS to the registration time when someone
  1232. * recreates a registered channel, ensuring that they are deopped
  1233. * and all their modes are undone. Note that this involves ChanServ
  1234. * joining. When the channel was not recreated no deops will be done
  1235. * (apart from the SECURE option).
  1236. * This also solves the "join-mode" problem where someone recreates
  1237. * a registered channel and then sets some modes before they are
  1238. * deopped.
  1239. * This is currently supported for charybdis, ratbox, bahamut,
  1240. * and inspircd 1.1+. For charybdis and ratbox it only fully
  1241. * works with TS6, with TS5 bans and last-moment modes will
  1242. * still apply.
  1243. * (That can also be used to advantage, when first enabling this.)
  1244. */
  1245. #changets;
  1246.  
  1247. /* (*) trigger
  1248. * This setting allows you to change the trigger prefix for
  1249. * ChanServ's in-channel command feature (disableable via chanserv::fantasy).
  1250. * If no setting is provided, the default is used, which is "!".
  1251. *
  1252. * Other settings you could consider trying: ".", "~", "?", "`", "'".
  1253. */
  1254. trigger = "!";
  1255.  
  1256. /* (*)expire
  1257. * The number of days before inactive registrations are expired.
  1258. */
  1259. expire = 30;
  1260.  
  1261. /* (*)maxchanacs
  1262. * The maximum number of entries allowed in a channel's access list
  1263. * (both channel ops and akicks), 0 for unlimited.
  1264. */
  1265. maxchanacs = 0;
  1266.  
  1267. /* (*)maxfounders
  1268. * The maximum number of founders allowed in a channel.
  1269. * Note that all founders have the exact same privileges and
  1270. * the list of founders is shown in various places.
  1271. */
  1272. maxfounders = 4;
  1273.  
  1274. /* (*)founder_flags
  1275. * The flags a user will get when they register a new channel.
  1276. * This MUST include at least 'F' or it will be ignored.
  1277. * If it is not set, Atheme will give the user all channel flags.
  1278. */
  1279. #founder_flags = "AFORefiorstv";
  1280.  
  1281. /* (*)akick_time
  1282. * The default expiration time (in minutes) for AKICKs.
  1283. * Comment this option out or set to zero for permanent AKICKs
  1284. * by default (the old behaviour).
  1285. */
  1286. #akick_time = 10;
  1287.  
  1288. /* (*)antiflood_enforce_method
  1289. * The enforcement method to use for flood protection by default.
  1290. * This may be overridden by channel staff.
  1291. * Available options are: quiet, kickban and akill.
  1292. */
  1293. antiflood_enforce_method = quiet;
  1294. };
  1295.  
  1296. /* CHANFIX configuration.
  1297. *
  1298. * The chanfix {} block contains settings specific to the CHANFIX modules.
  1299. *
  1300. * CHANFIX provides channel recovery services without registration, which
  1301. * allows users to maintain control of channels even if ChanServ is not used
  1302. * to register them.
  1303. */
  1304. chanfix {
  1305. /* (*)nick
  1306. * The nickname we want the client to have.
  1307. */
  1308. nick = "ChanFix";
  1309.  
  1310. /* (*)user
  1311. * The username we want the client to have.
  1312. */
  1313. user = "ChanFix";
  1314.  
  1315. /* (*)host
  1316. * The hostname we want the client to have.
  1317. */
  1318. host = "services.int";
  1319.  
  1320. /* (*)real
  1321. * The GECOS of the client.
  1322. */
  1323. real = "Channel Fixing Service";
  1324.  
  1325. /* (*)autofix
  1326. * Automatically fix channels if they become opless and meet fixing
  1327. * criteria.
  1328. */
  1329. autofix;
  1330. };
  1331.  
  1332. /* Global noticing configuration.
  1333. *
  1334. * The global {} block contains settings specific to the Global notice module.
  1335. *
  1336. * The Global notice module provides the ability to mass-notify a network.
  1337. */
  1338. global {
  1339. /* (*)nick
  1340. * Sets the nick used for sending out a global notice.
  1341. */
  1342. nick = "Global";
  1343.  
  1344. /* (*)user
  1345. * Sets the username used for this client.
  1346. */
  1347. user = "Global";
  1348.  
  1349. /* (*)host
  1350. * The hostname used for this client.
  1351. */
  1352. host = "services.int";
  1353.  
  1354. /* (*)real
  1355. * The GECOS (real name) of the client.
  1356. */
  1357. real = "Network Announcements";
  1358. };
  1359.  
  1360. /* InfoServ configuration
  1361. *
  1362. * The infoserv {} block contains settings specific to the InfoServ module.
  1363. *
  1364. * The InfoServ modules provides the ability to mass-notify a network and send
  1365. * news to users when they connect to the network.
  1366. */
  1367. infoserv {
  1368. /* (*)nick
  1369. * Sets the nick used for InfoServ and sending out informational messages.
  1370. */
  1371. nick = "InfoServ";
  1372.  
  1373. /* (*)user
  1374. * Sets the username used for this client.
  1375. */
  1376. user = "InfoServ";
  1377.  
  1378. /* (*)host
  1379. * The hostname used for this client,
  1380. */
  1381. host = "services.int";
  1382.  
  1383. /* (*)real
  1384. * The GECOS (real name) of the client.
  1385. */
  1386. real = "Information Service";
  1387.  
  1388. /* (*)logoninfo_count
  1389. * The number of InfoServ messages a user will see upon connect.
  1390. * If there are more than this number, the user will be able to
  1391. * see the rest with /msg infoserv list .
  1392. */
  1393. logoninfo_count = 3;
  1394. };
  1395.  
  1396. /* OperServ configuration.
  1397. *
  1398. * The operserv {} block contains settings specific to the OperServ modules.
  1399. *
  1400. * OperServ provides essential network management tools for IRC operators
  1401. * on the IRC network.
  1402. */
  1403. operserv {
  1404. /* (*)nick
  1405. * The nickname we want the Operator Service to have.
  1406. */
  1407. nick = "OperServ";
  1408.  
  1409. /* (*)user
  1410. * Sets the username used for this client.
  1411. */
  1412. user = "OperServ";
  1413.  
  1414. /* (*)host
  1415. * The hostname used for this client.
  1416. */
  1417. host = "services.int";
  1418.  
  1419. /* (*)real
  1420. * The GECOS (real name) of the client.
  1421. */
  1422. real = "Operator Services";
  1423.  
  1424. /* (*)aliases
  1425. * Command aliases for OperServ.
  1426. */
  1427. aliases {
  1428. };
  1429.  
  1430. /* (*)access
  1431. * Command access changes for OperServ.
  1432. */
  1433. access {
  1434. };
  1435. };
  1436.  
  1437. /* SaslServ configuration.
  1438. *
  1439. * The saslserv {} block contains settings specific to the SaslServ modules.
  1440. *
  1441. * SaslServ provides an authentication agent which is compatible with the
  1442. * SASL over IRC (SASL/IRC) protocol extension.
  1443. */
  1444. saslserv {
  1445. /* (*)nick
  1446. * The nickname we want SaslServ to have.
  1447. */
  1448. nick = "SaslServ";
  1449.  
  1450. /* (*)user
  1451. * The username we want SaslServ to have.
  1452. */
  1453. user = "SaslServ";
  1454.  
  1455. /* (*)host
  1456. * The hostname we want SaslServ to have.
  1457. */
  1458. host = "services.int";
  1459.  
  1460. /* (*)real
  1461. * The realname (gecos) information we want SaslServ to have.
  1462. */
  1463. real = "SASL Authentication Agent";
  1464.  
  1465. /* (*)hide_server_names
  1466. * Hide server names in the bad_password message.
  1467. */
  1468. #hide_server_names;
  1469. };
  1470.  
  1471. /* MemoServ configuration.
  1472. *
  1473. * The memoserv {} block contains settings specific to the MemoServ modules.
  1474. *
  1475. * MemoServ provides a note-taking service that you can use to send notes
  1476. * to offline users (provided they are registered with Services).
  1477. */
  1478. memoserv {
  1479. /* (*)nick
  1480. * The nickname we want MemoServ to have.
  1481. */
  1482. nick = "MemoServ";
  1483.  
  1484. /* (*)user
  1485. * The username we want MemoServ to have.
  1486. */
  1487. user = "MemoServ";
  1488.  
  1489. /* (*)host
  1490. * The hostname we want MemoServ to have.
  1491. */
  1492. host = "services.int";
  1493.  
  1494. /* (*)real
  1495. * The realname (gecos) information we want MemoServ to have.
  1496. */
  1497. real = "Memo Services";
  1498.  
  1499. /* (*)aliases
  1500. * Command aliases for MemoServ.
  1501. */
  1502. aliases {
  1503. };
  1504.  
  1505. /* (*)access
  1506. * Command access changes for MemoServ.
  1507. */
  1508. access {
  1509. };
  1510.  
  1511. /* (*)maxmemos
  1512. * What is the maximum amount of memos a user can have in their inbox?
  1513. */
  1514. maxmemos = 30;
  1515. };
  1516.  
  1517. /* GameServ configuration.
  1518. *
  1519. * The gameserv {} block contains settings specific to the GameServ modules.
  1520. *
  1521. * GameServ provides various in-channel commands for games.
  1522. */
  1523. gameserv {
  1524. /* (*)nick
  1525. * The nickname we want GameServ to have.
  1526. */
  1527. nick = "GameServ";
  1528.  
  1529. /* (*)user
  1530. * Sets the username used for this client.
  1531. */
  1532. user = "GameServ";
  1533.  
  1534. /* (*)host
  1535. * The hostname used for this client.
  1536. */
  1537. host = "services.int";
  1538.  
  1539. /* (*)real
  1540. * The GECOS (real name) of the client.
  1541. */
  1542. real = "Game Services";
  1543.  
  1544. /* (*)aliases
  1545. * Command aliases for GameServ.
  1546. */
  1547. aliases {
  1548. };
  1549.  
  1550. /* (*)access
  1551. * Command access changes for GameServ.
  1552. */
  1553. access {
  1554. };
  1555. };
  1556.  
  1557. /* RPGServ configuration.
  1558. *
  1559. * The rpgserv {} block contains settings specific to the RPGServ modules.
  1560. *
  1561. * RPGServ provides a facility for finding roleplaying channels.
  1562. */
  1563. rpgserv {
  1564. /* (*)nick
  1565. * The nickname we want RPGServ to have.
  1566. */
  1567. nick = "RPGServ";
  1568.  
  1569. /* (*)user
  1570. * Sets the username used for this client.
  1571. */
  1572. user = "RPGServ";
  1573.  
  1574. /* (*)host
  1575. * The hostname used for this client.
  1576. */
  1577. host = "services.int";
  1578.  
  1579. /* (*)real
  1580. * The GECOS (real name) of the client.
  1581. */
  1582. real = "RPG Finding Services";
  1583.  
  1584. /* (*)aliases
  1585. * Command aliases for RPGServ.
  1586. */
  1587. aliases {
  1588. };
  1589.  
  1590. /* (*)access
  1591. * Command access changes for RPGServ.
  1592. */
  1593. access {
  1594. };
  1595. };
  1596.  
  1597. /* BotServ configuration.
  1598. *
  1599. * The botserv {} block contains settings specific to the BotServ modules.
  1600. *
  1601. * BotServ provides virtual channel bots.
  1602. */
  1603. botserv {
  1604. /* (*)nick
  1605. * The nickname we want BotServ to have.
  1606. */
  1607. nick = "BotServ";
  1608.  
  1609. /* (*)user
  1610. * Sets the username used for this client.
  1611. */
  1612. user = "BotServ";
  1613.  
  1614. /* (*)host
  1615. * The hostname used for this client.
  1616. */
  1617. host = "services.int";
  1618.  
  1619. /* (*)real
  1620. * The GECOS (real name) of the client.
  1621. */
  1622. real = "Bot Services";
  1623.  
  1624. /* (*)min_users
  1625. * Minimum number of users a channel must have before a Bot is allowed
  1626. * to be assigned to that channel.
  1627. */
  1628. min_users = 0;
  1629. };
  1630.  
  1631. /* GroupServ configuration.
  1632. *
  1633. * The groupserv {} block contains settings specific to the GroupServ modules.
  1634. *
  1635. * GroupServ provides features for managing a collection of channels at once.
  1636. *
  1637. */
  1638. groupserv {
  1639. /* (*)nick
  1640. * The nickname we want GroupServ to have.
  1641. */
  1642. nick = "GroupServ";
  1643.  
  1644. /* (*)user
  1645. * The username we want GroupServ to have.
  1646. */
  1647. user = "GroupServ";
  1648.  
  1649. /* (*)host
  1650. * The hostname we want GroupServ to have.
  1651. */
  1652. host = "services.int";
  1653.  
  1654. /* (*)real
  1655. * The realname (gecos) information we want GroupServ to have.
  1656. */
  1657. real = "Group Management Services";
  1658.  
  1659. /* (*)aliases
  1660. * Command aliases for GroupServ.
  1661. */
  1662. aliases {
  1663. };
  1664.  
  1665. /* (*)access
  1666. * Command access changes for GroupServ.
  1667. */
  1668. access {
  1669. };
  1670.  
  1671. /* (*)maxgroups
  1672. * Maximum number of groups one username can be founder of.
  1673. */
  1674. maxgroups = 5;
  1675.  
  1676. /* (*)maxgroupacs
  1677. * Maximum number of access entries you may have in a group.
  1678. */
  1679. maxgroupacs = 100;
  1680.  
  1681. /* (*)enable_open_groups
  1682. * Setting this option will allow any group founder to mark
  1683. * their group as "anyone can join".
  1684. */
  1685. enable_open_groups;
  1686.  
  1687. /* (*)join_flags
  1688. * This is the GroupServ flagset that users who JOIN a open
  1689. * group will get upon join. Please check the groupserv/flags
  1690. * helpfile before changing this option. Valid flagsets (for
  1691. * example) would be: "+v" or "+cv". It is not valid to use
  1692. * minus flags (such as "-v") here.
  1693. */
  1694. join_flags = "+";
  1695. };
  1696.  
  1697. /* HostServ configuration.
  1698. *
  1699. * The hostserv {} block contains settings specific to the HostServ modules.
  1700. *
  1701. * HostServ provides advanced virtual host management.
  1702. */
  1703. hostserv {
  1704. /* (*)nick
  1705. * The nickname we want HostServ to have.
  1706. */
  1707. nick = "HostServ";
  1708.  
  1709. /* (*)user
  1710. * Sets the username used for this client.
  1711. */
  1712. user = "HostServ";
  1713.  
  1714. /* (*)host
  1715. * The hostname used for this client.
  1716. */
  1717. host = "services.int";
  1718.  
  1719. /* (*)real
  1720. * The GECOS (real name) of the client.
  1721. */
  1722. real = "Host Management Services";
  1723.  
  1724. /* (*)request_per_nick
  1725. * Whether the request system should work per nick or per account.
  1726. * The recommended setting is to leave this disabled, so that
  1727. * vhosts work as consistently as possible.
  1728. */
  1729. #request_per_nick;
  1730.  
  1731. /* (*)aliases
  1732. * Command aliases for HostServ.
  1733. */
  1734. aliases {
  1735. "APPROVE" = "ACTIVATE";
  1736. "DENY" = "REJECT";
  1737. };
  1738.  
  1739. /* (*)access
  1740. * Command access changes for HostServ.
  1741. */
  1742. access {
  1743. };
  1744. };
  1745.  
  1746. /* HelpServ configuration
  1747. *
  1748. * The helpserv {} block contains settings specific to the HelpServ modules.
  1749. *
  1750. * HelpServ adds a few different ways for users to request help from network staff.
  1751. */
  1752. helpserv {
  1753. /* (*)nick
  1754. * The nickname we want HelpServ to have.
  1755. */
  1756. nick = "HelpServ";
  1757.  
  1758. /* (*)user
  1759. * The username we want HelpServ to have.
  1760. */
  1761. user = "HelpServ";
  1762.  
  1763. /* (*)host
  1764. * The hostname we want HelpServ to have.
  1765. */
  1766. host = "services.int";
  1767.  
  1768. /* (*)real
  1769. * The realname (gecos) information we want HelpServ to have.
  1770. */
  1771. real = "Help Services";
  1772. };
  1773.  
  1774. /* StatServ configuration
  1775. *
  1776. * The statserv {} block contains settings specific to the StatServ modules.
  1777. *
  1778. * StatServ adds basic stats and split tracking.
  1779. */
  1780. statserv {
  1781. /* (*)nick
  1782. * The nickname we want StatServ to have.
  1783. */
  1784. nick = "StatServ";
  1785.  
  1786. /* (*)user
  1787. * The username we want StatServ to have.
  1788. */
  1789. user = "StatServ";
  1790.  
  1791. /* (*)host
  1792. * The hostname we want StatServ to have.
  1793. */
  1794. host = "services.int";
  1795.  
  1796. /* (*)real
  1797. * The realname (gecos) information we want StatServ to have.
  1798. */
  1799. real = "Statistics Services";
  1800. };
  1801.  
  1802. /* ALIS configuration.
  1803. *
  1804. * The alis {} block contains settings specific to the ALIS modules.
  1805. */
  1806. alis {
  1807. /* (*)nick
  1808. * The nickname we want ALIS to have.
  1809. */
  1810. nick = "ALIS";
  1811.  
  1812. /* (*)user
  1813. * The username we want ALIS to have.
  1814. */
  1815. user = "alis";
  1816.  
  1817. /* (*)host
  1818. * The hostname we want ALIS to have.
  1819. */
  1820. host = "services.int";
  1821.  
  1822. /* (*)real
  1823. * The realname (gecos) information we want ALIS to have.
  1824. */
  1825. real = "Channel Directory";
  1826. };
  1827.  
  1828. /* HTTP server configuration.
  1829. *
  1830. * The httpd {} block contains settings specific to the HTTP server module.
  1831. *
  1832. * The HTTP server in Services is used for serving XMLRPC requests. It can
  1833. * also serve static documents and statistics pages.
  1834. */
  1835. #httpd {
  1836. /* host
  1837. * The host that the HTTP server will listen on.
  1838. * Use 0.0.0.0 if you want to listen on all available hosts.
  1839. */
  1840. host = "80.211.182.138";
  1841.  
  1842. /* host (ipv6)
  1843. * If you want, you can have Atheme listen on an IPv6 host too.
  1844. * Use :: if you want to listen on all available IPv6 hosts.
  1845. */
  1846. #host = "::";
  1847.  
  1848. /* www_root
  1849. * The directory that contains the files that should be served by the httpd.
  1850. */
  1851. www_root = "/var/www";
  1852.  
  1853. /* port
  1854. * The port that the HTTP server will listen on.
  1855. */
  1856. port = 8080;
  1857.  
  1858. /* LDAP configuration.
  1859. *
  1860. * The ldap {} block contains settings specific to the LDAP authentication
  1861. * module.
  1862. */
  1863. ldap {
  1864. /* (*)url
  1865. * LDAP URL of the server to use.
  1866. */
  1867. url = "ldap://127.0.0.1";
  1868.  
  1869. /* (*)dnformat
  1870. * Format string to convert an account name to an LDAP DN.
  1871. * Must contain exactly one %s which will be replaced by the account
  1872. * name.
  1873. * Services will attempt a simple bind with this DN and the given
  1874. * password; if this is successful the password is considered correct.
  1875. */
  1876. dnformat = "cn=%s,dc=jillestest,dc=com";
  1877. };
  1878.  
  1879. /******************************************************************************
  1880. * LOGGING SECTION. *
  1881. ******************************************************************************/
  1882.  
  1883. /*
  1884. * logfile{} blocks can be used to set up log files other than the master
  1885. * logfile used by services, which is controlled by serverinfo::loglevel.
  1886. *
  1887. * The various logging categories are:
  1888. * debug, all - meta-keyword for all possible categories
  1889. * trace - meta-keyword for a little bit of info
  1890. * misc - like trace, but with some more miscillaneous info
  1891. * notice - meta-keyword for notice-like information
  1892. * ------------------------------------------------------------------------------
  1893. * error - critical errors
  1894. * info - miscillaneous log notices
  1895. * verbose - A bit more verbose than info, not quite as spammy as debug
  1896. * commands - all command use
  1897. * admin - administrative command use
  1898. * register - account and channel registrations
  1899. * set - changes of account or channel settings
  1900. * request - user requests (currently only vhosts)
  1901. * network - log notices related to network status
  1902. * rawdata - log raw data sent and received by services
  1903. * wallops - <not yet used>
  1904. * denycmd - security model denials (commands, permissions)
  1905. */
  1906.  
  1907. /*
  1908. * This block logs all account and channel registrations and drops,
  1909. * and account and channel setting changes to var/account.log.
  1910. */
  1911. logfile "var/account.log" { register; set; };
  1912.  
  1913. /*
  1914. * This block logs all command use to var/commands.log.
  1915. */
  1916. logfile "var/commands.log" { commands; };
  1917.  
  1918. /*
  1919. * This block logs all security auditing information.
  1920. */
  1921. logfile "var/audit.log" { denycmd; };
  1922.  
  1923. /*
  1924. * You can log to IRC channels, and even split it by category, too.
  1925. * This entry provides roughly the same functionality as the old snoop
  1926. * feature.
  1927. */
  1928. logfile "#services" { error; info; admin; request; register; denycmd; };
  1929.  
  1930. /*
  1931. * This block logs to server notices.
  1932. */
  1933. logfile "!snotices" { error; info; request; denycmd; };
  1934.  
  1935. /******************************************************************************
  1936. * GENERAL PARAMETERS CONFIGURATION SECTION. *
  1937. ******************************************************************************/
  1938.  
  1939. /* The general {} block defines general configuration options. */
  1940. general {
  1941. /* (*)permissive_mode
  1942. * Whether or not security denials should be soft denials instead of
  1943. * hard denials. If security denials are soft denials, then they will
  1944. * only be logged to the denial log.
  1945. */
  1946. #permissive_mode;
  1947.  
  1948. /* (*)helpchan
  1949. * Network help channel. Shown to users when they request
  1950. * help for a command that doesn't exist.
  1951. */
  1952. #helpchan = "#help";
  1953.  
  1954. /* (*)helpurl
  1955. * Network webpage for services help. Shown to users when they
  1956. * request help for a command that doesn't exist.
  1957. */
  1958. #helpurl = "http://www.stack.nl/~jilles/irc/atheme-help/";
  1959.  
  1960. /* (*)silent
  1961. * If you want to prevent services from sending
  1962. * WALLOPS/GLOBOPS about things uncomment this.
  1963. * Not recommended.
  1964. */
  1965. #silent;
  1966.  
  1967. /* (*)verbose_wallops
  1968. * If you want services to send you more information about
  1969. * events that are occuring (in particular AKILLs), uncomment the
  1970. * directive below.
  1971. *
  1972. * WARNING! This may result in large amounts of wallops/globops
  1973. * floods.
  1974. */
  1975. #verbose_wallops;
  1976.  
  1977. /* (*)join_chans
  1978. * Should ChanServ be allowed to join registered channels?
  1979. * This option is useful for the fantasy command set.
  1980. *
  1981. * If enabled, you can tell ChanServ to join via SET GUARD ON.
  1982. *
  1983. * If you use ircu-like ircd (asuka), you must
  1984. * leave this enabled, and put guard in default cflags.
  1985. *
  1986. * For ratbox it is recommended to leave it on and put guard in
  1987. * default cflags, in order that ChanServ does not have to join/part
  1988. * to do certain things. On the other hand, enabling this increases
  1989. * potential for bots fighting with ChanServ.
  1990. *
  1991. * Regardless of this option, ChanServ will temporarily join
  1992. * channels which would otherwise be empty if necessary to enforce
  1993. * akick/restricted/close, and to change the TS if changets is
  1994. * enabled.
  1995. */
  1996. join_chans;
  1997.  
  1998. /* (*)leave_chans
  1999. * Do we leave registered channels after everyone else has left?
  2000. * Turning this off serves little purpose, except to mark "official"
  2001. * network channels by keeping them open, and to preserve the
  2002. * topic and +beI lists.
  2003. */
  2004. leave_chans;
  2005.  
  2006. /* secure
  2007. * Do you want to require the use of /msg <service>@<services host>?
  2008. * Turning this on helps protect against spoofers, but is disabled
  2009. * as most networks do not presently use it.
  2010. */
  2011. #secure;
  2012.  
  2013. /* (*)uflags
  2014. * The default flags to set for usernames upon registration.
  2015. * Valid values are: hold, neverop, noop, hidemail, nomemo, emailmemos,
  2016. * enforce, privmsg, private, quietchg and none.
  2017. */
  2018. uflags = { hidemail; };
  2019.  
  2020. /* (*)cflags
  2021. * The default flags to set for channels upon registration.
  2022. * Valid values are: hold, secure, verbose, verbose_ops, keeptopic,
  2023. * topiclock, guard, private, nosync, limitflags, pubacl and none.
  2024. */
  2025. cflags = { verbose; guard; };
  2026.  
  2027. /* (*)raw
  2028. * Do you want to allow SRAs to use the RAW and INJECT commands?
  2029. * These commands are for debugging. If you don't know how to use them
  2030. * then don't enable them. They are not supported.
  2031. */
  2032. #raw;
  2033.  
  2034. /* (*)flood_msgs
  2035. * Do you want services to detect floods?
  2036. * Set to how many messages before a flood is triggered.
  2037. * Note that some messages that need a lot of processing count
  2038. * as two or four messages.
  2039. * If services receives `flood_msgs' within `flood_time' the user will
  2040. * trigger the flood protection.
  2041. * Setting this to zero disables flood protection.
  2042. */
  2043. flood_msgs = 7;
  2044.  
  2045. /* (*)flood_time
  2046. * Do you want services to detect floods?
  2047. * Set to how long before the counter resets.
  2048. * If services receives `flood_msgs' within `flood_time' the user will
  2049. * trigger the flood protection.
  2050. */
  2051. flood_time = 10;
  2052.  
  2053. /* (*)ratelimit_uses
  2054. * After how many uses of a command will users be throttled.
  2055. * After `ratelimit_uses' of a command within `ratelimit_period', users
  2056. * will not be able to run that ratelimited command until the period is up.
  2057. * Comment this, ratelimit_period below or both options out to disable rate limiting.
  2058. * Currently used in helpserv/helpme, helpserv/ticket, hostserv/request,
  2059. * nickserv/register and chanserv/register.
  2060. */
  2061. ratelimit_uses = 5;
  2062.  
  2063. /* (*)ratelimit_period
  2064. * After how much time (in seconds) will the ratelimit_uses counter reset.
  2065. * After `ratelimit_uses' of a command within `ratelimit_period', users
  2066. * will not be able to run that ratelimited command until the period is up.
  2067. * Comment this, ratelimit_uses above or both options out to disable rate limiting.
  2068. * Currently used in helpserv/helpme, helpserv/ticket, hostserv/request,
  2069. * nickserv/register and chanserv/register.
  2070. */
  2071. ratelimit_period = 60;
  2072.  
  2073. /* (*)kline_time
  2074. * The default expire time for KLINE's in days.
  2075. * Setting this to 0 makes all KLINE's permanent.
  2076. */
  2077. kline_time = 7;
  2078.  
  2079. /* (*)kline_with_ident
  2080. * KLINE user@host instead of *@host.
  2081. * Applies to all automatic KLINE's set by services.
  2082. */
  2083. #kline_with_ident;
  2084.  
  2085. /* (*)kline_verified_ident
  2086. * KLINE *@host if the first character of the ident is ~,
  2087. * irrespective of the value of kline_with_ident.
  2088. */
  2089. #kline_verified_ident;
  2090.  
  2091. /* (*)clone_time
  2092. * This is the default expiry time for CLONE exemptions in minutes.
  2093. * Setting this to 0 makes all CLONE exemptions permanent.
  2094. */
  2095. clone_time = 0;
  2096.  
  2097. /* commit_interval
  2098. * The time between database writes in minutes.
  2099. */
  2100. commit_interval = 5;
  2101.  
  2102. /* (*)default_clone_allowed
  2103. * The limit after which clones will be KILLed or TKLINEd.
  2104. * Used by operserv/clones.
  2105. */
  2106. default_clone_allowed = 5;
  2107.  
  2108. /* (*)default_clone_warn
  2109. * The limit after which clones will be warned that they may not
  2110. * have any more concurrent connections. Should be lower than
  2111. * default_clone_allowed . Used by operserv/clones.
  2112. */
  2113. default_clone_warn = 4;
  2114.  
  2115. /* (*)clone_identified_increase_limit
  2116. * If this option is enabled, the clone limit for a IP/host will
  2117. * be increased by 1 per clone that's identified to services.
  2118. * This has a limit of double the clone limits above.
  2119. */
  2120. clone_identified_increase_limit;
  2121.  
  2122. /* (*)uplink_sendq_limit
  2123. * The maximum amount of data that may be queued to be sent
  2124. * to the uplink, in bytes. This should be enough to contain
  2125. * Atheme's response to the netburst, but smaller than the
  2126. * IRCd's sendq limit for servers.
  2127. */
  2128. uplink_sendq_limit = 1048576;
  2129.  
  2130. /* (*)language
  2131. * Language to use for channel and oper messages and as default
  2132. * for users.
  2133. */
  2134. language = "en";
  2135.  
  2136. /* exempts
  2137. * This block contains a list of user@host masks. Users matching any
  2138. * of these will not be automatically K:lined by services.
  2139. */
  2140. exempts {
  2141. };
  2142.  
  2143. /* allow_taint
  2144. * By enabling this option, Atheme will run in configurations where
  2145. * the upstream will not provide support. By enabling this feature,
  2146. * you void any perceived rights to support.
  2147. */
  2148. #allow_taint;
  2149.  
  2150. /* (*)immune_level
  2151. * This option allows you to customize the operlevel which gets kick
  2152. * immunity privileges.
  2153. *
  2154. * The following flags are available:
  2155. * immune - require whatever ircd usermode is needed for kick
  2156. * immunity (this is the default);
  2157. * admin - require admin privileges for kick immunity
  2158. * ircop - require any ircop privileges for kick immunity (umode +o)
  2159. */
  2160. immune_level = immune;
  2161.  
  2162. /* show_entity_id
  2163. * This makes nick/user & group entity IDs visible to everyone, rather
  2164. * than just opers with user:auspex or group:auspex privileges.
  2165. */
  2166. show_entity_id;
  2167. };
  2168.  
  2169. proxyscan {
  2170. /* Here you can configure the details of your Proxyscan (DNS Blacklist)
  2171. * scanner service.
  2172. */
  2173.  
  2174. nick = "Proxyscan";
  2175. user = "dnsbl";
  2176. host = "services.int";
  2177. real = "Proxyscan Service";
  2178.  
  2179. blacklists {
  2180. "dnsbl.dronebl.org";
  2181. "rbl.efnetrbl.org";
  2182. "tor.efnet.org";
  2183. };
  2184.  
  2185. /* Available dnsbl_action's:
  2186. * NONE - Do nothing
  2187. * NOTIFY - Notify user that they are listed in a DNSBL and which one
  2188. * SNOOP - Report the user to the logchannel or services channel
  2189. * KLINE - AKILL the user from the network (default AKILL is 24 hours)
  2190. */
  2191.  
  2192. dnsbl_action = kline;
  2193. };
  2194.  
  2195. /******************************************************************************
  2196. * OPERATOR AND PRIVILEGES CONFIGURATION SECTION. *
  2197. ******************************************************************************/
  2198.  
  2199. /* Operator configuration
  2200. * See the PRIVILEGES document for more information.
  2201. * NOTE: All changes apply immediately upon rehash. You may need
  2202. * to send a signal (killall -HUP atheme-services) to regain control.
  2203. */
  2204. /* (*) Operclasses specify groups of services operator privileges */
  2205. /* The "user" operclass specifies privileges all users get.
  2206. * This may be empty (default) in which case users get no special privileges.
  2207. * If you use the security/cmdperm module, you will need to grant command: privileges
  2208. * to every command that you want users to be able to use.
  2209. */
  2210. operclass "user" { };
  2211.  
  2212. /* The "ircop" operclass specifies privileges all IRCops get.
  2213. * This may be empty in which case IRCops get no privs.
  2214. * At least chan:cmodes, chan:joinstaffonly and general:auspex are suggested.
  2215. */
  2216. operclass "ircop" {
  2217. privs {
  2218. special:ircop;
  2219. };
  2220.  
  2221. privs {
  2222. user:auspex;
  2223. user:admin;
  2224. user:sendpass;
  2225. user:vhost;
  2226. user:mark;
  2227. };
  2228.  
  2229. privs {
  2230. chan:auspex;
  2231. chan:admin;
  2232. chan:cmodes;
  2233. chan:joinstaffonly;
  2234. };
  2235.  
  2236. privs {
  2237. general:auspex;
  2238. general:helper;
  2239. general:viewprivs;
  2240. general:flood;
  2241. };
  2242.  
  2243. privs {
  2244. operserv:omode;
  2245. operserv:akill;
  2246. operserv:jupe;
  2247. operserv:global;
  2248. };
  2249.  
  2250. privs {
  2251. group:auspex;
  2252. group:admin;
  2253. };
  2254. };
  2255.  
  2256. operclass "sra" {
  2257. /* You can inherit privileges from a lower operclass. */
  2258. extends "ircop";
  2259.  
  2260. privs {
  2261. user:hold;
  2262. user:regnolimit;
  2263. };
  2264.  
  2265. privs {
  2266. general:metadata;
  2267. general:admin;
  2268. };
  2269.  
  2270. privs {
  2271. #operserv:massakill;
  2272. #operserv:akill-anymask;
  2273. operserv:noop;
  2274. operserv:grant;
  2275. #operserv:override;
  2276. };
  2277.  
  2278. /* needoper
  2279. * Only grant privileges to IRC users in this oper class if they
  2280. * are opered; other use of privilege (channel succession, XMLRPC,
  2281. * etc.) is unaffected by this.
  2282. */
  2283. needoper;
  2284. };
  2285.  
  2286.  
  2287. /* (*) Operator blocks specify accounts with certain privileges
  2288. * Oper classes must be defined before they are used in operator blocks.
  2289. */
  2290. operator "jilles" {
  2291. /* operclass */
  2292. operclass = "sra";
  2293. /* password
  2294. * Normally, the user needs to identify/log in using the account's
  2295. * password, and may need to be an IRCop (see operclass::needoper
  2296. * above). If you consider this not secure enough, you can
  2297. * specify an additional password here, which the user must enter
  2298. * using the OperServ IDENTIFY command, before the privileges can
  2299. * be used.
  2300. * The password must be encrypted if a crypto module is in use.
  2301. */
  2302. #password = "$1$3gJMO9by$0G60YE6GqmuHVH3AnFPor1";
  2303. };
  2304.  
  2305. /******************************************************************************
  2306. * INCLUDE CONFIGURATION SECTION. *
  2307. ******************************************************************************/
  2308.  
  2309. /* You may also specify other files for inclusion.
  2310. * For example:
  2311. *
  2312. * include "etc/sras.conf";
  2313. */
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!