]> jfr.im git - irc/evilnet/x3.git/blob - x3.conf.example
Miscellaneous text change to see if svnnotify works.
[irc/evilnet/x3.git] / x3.conf.example
1 /* *****************************************************************
2 * X3 Services Example Configuration file.
3 *
4 * Copy it to your x3 runtime dir, and edit to taste.
5 *
6 * This file allows two kinds of comments. Whitespaces between
7 * tokens are ignored. All strings (even if they're just numbers)
8 * MUST be enclosed in double quotes. There must be a semicolon
9 * after every * key/value pair.
10 */
11
12 /* UPLINKS (servers we connect to) *********************************
13 * Each subsection describes one server. X3 will try to connect to
14 * each in turn maxtries times, and then will quit.
15 */
16 "uplinks" {
17 // This first entry connects to an ircd on teh same server an X3..
18 "Hub" { // This can be any string, just used here for your conveniance
19 "address" "127.0.0.1"; // The IP address of the server
20 "port" "8888"; // What TCP port to connect to
21 "password" "laoo,rpe"; // Both of these passwords must match
22 "their_password" "laoo,rpe"; // the one in the ircd C line for X3.
23 "enabled" "1"; // Set to 0 to disable connecting to this server
24 "max_tries" "10"; // How many times to attemt reconnect before quitting
25 "bind_address" "127.0.0.1"; // LOCAL IP address we want to connect FROM
26 };
27 // This next one connects to an ircd on another server
28 "Hub-west" {
29 // IP address and port the server listens on
30 "address" "192.168.234.123"; // IP of remote server
31 "port" "8888";
32 "password" "ekrpat"; // C line passwords
33 "their_password" "ekrpat"; // Set same as above
34 "enabled" "0"; // Set this to 1 to use this server..
35 "max_tries" "1";
36 "bind_address" "192.168.1.10";
37 };
38 };
39
40 /* SERVER (Details about our existance) **********************************
41 */
42 "server" {
43 "hostname" "X3.AfterNET.Services"; // The servers name. (Use this in the ircd's C line)
44 "description" "AfterNET Network Services"; // Shows up in /links.
45 "network" "AfterNET";
46 "hidden_host" "Users.AfterNET.Org"; // set this if you enabled Nefarious' +x mode
47 /* hidden_host should match the F:HIDDEN_HOST: line in your ircu's ircd.conf;
48 * x3 does not set the host suffix for users, but must know it when making
49 * things like bans, where it should not show the user's real hostname. */
50 "numeric" "51"; // hint: If you get collisions on link, CHANGE THIS.
51 "max_users" "256"; // You can save a little memory by setting this to a lower value.
52 "force_n2k" "1"; // Use extended (5-digit) numnick for self, even if 3 are possible.
53 "ping_freq" "60";
54 "ping_timeout" "90";
55 "max_cycles" "30"; // max uplink cycles before giving up
56 // Admin information is traditionally: location, location, email
57 // This shows up on a /admin x3.afternet.services command.
58 "admin" (
59 "AfterNET IRC Network",
60 "www.afternet.org",
61 "Support Staff <support@afternet.org>"
62 );
63 /* the following two settings are for ircu's HEAD_IN_SAND features, and are equivelent to
64 * the F: lines in ircu's ircd.conf. both can be disabled by commenting them out. */
65 //"his_servername" "*.AfterNET.org"; // hidden server name, shown in remote /whois requests
66 //"his_servercomment" "AfterNET IRC Network";
67 };
68
69 /* SERVICES (Bot nicknames) *******************************************
70 * Each section describes one service nickname and the details of that
71 * bot's features
72 * You may disable a service by commenting out its "nick" config item.
73 */
74 "services" {
75 /* Nickserv is the bot you register with and auth to.
76 * Afternet uses the name "Authserv" without the nickname reservation
77 * features enabled. Some nets call it Nickserv and configure it to
78 * reserve nicks.
79 */
80 "nickserv" {
81 "nick" "AuthServ"; // The bots nick on IRC
82
83 // If you want to have *@* as the default hostmask, set
84 // default_hostmask. I highly reccomend this, and its required
85 // for login-on-connect to work.
86 "default_hostmask" "1";
87
88 // do we warn users when someone new auths to their account?
89 "warn_clone_auth" "1"; // -X3- warning: foobar has authed to your account
90
91 // default max number of logins allowed on new accounts. Users can set it
92 // to something different using authserv commands.
93 "default_maxlogins" "3";
94
95 // hard_maxlogins is the ammount the user cant override.
96 "hard_maxlogins" "10";
97
98 // This names a file that contains easily guessed passwords.
99 // It always contains "password", "<password>" and the user's
100 // account name.
101 // uncomment if you have a dict file.
102 //"dict_file" "/usr/share/dict/words";
103
104 // Minimum number of various types of characters permitted in
105 // a password. Authserv will enforce these.
106 "password_min_length" "4";
107 "password_min_digits" "0";
108 "password_min_upper" "0";
109 "password_min_lower" "0";
110
111 // What should valid account and nicks look like?
112 // If valid_nick_regex is omitted, valid_account_regex is used
113 // for both nicks and accounts.
114 // Be very carefull changing these. This default is
115 // basically limited to letters, numbers, dash and underscore.
116 "valid_account_regex" "^[-_a-z0-9A-Z]{2,15}$";
117 "valid_nick_regex" "^[-_a-z][-_a-z0-9]*$";
118
119 // "Nickserv" networks, set this to 0. "Authserv" networks,
120 // set it to 1.
121 "disable_nicks" "1";
122 // One account may only own this many nicks.
123 "nicks_per_account" "4";
124
125 // Send a warning when someone uses a registered nick?
126 "warn_nick_owned" "0";
127
128 // What to do when someone uses the NickServ "reclaim" command?
129 // This can be one of "none", "warn", "svsnick", or "kill", but
130 // stock ircu does not support svsnick -- you need Bahamut or
131 // nefarious.
132 "reclaim_action" "none";
133
134 // What (else) to do when someone uses a registered nick?
135 // This can be anything "reclaim_action" can be, but it makes
136 // more sense to use the "warn_nick_owned" instead of "warn".
137 "auto_reclaim_action" "none";
138
139 // How long to wait before doing the auto_reclaim_action?
140 // This is ignored if "auto_reclaim_action" is "none".
141 "auto_reclaim_delay" "0";
142
143 // access control for who can change account flags
144 // See /msg authserv help account flags
145 "flag_levels" {
146 "g" "800"; // God mode
147 "lc_h" "800"; // support helper (lower case h)
148 "uc_H" "800"; // net helper (upper case H)
149 "S" "999"; // O3 access suspended
150 "b" "1"; // Bot (not sure what it does tho)
151 };
152
153 // and for who can change epithets for staff
154 // epithets show up in /whois as another line about the person.
155 "set_epithet_level" "800";
156
157 // what opserv access level do you need to set somebody else's level?
158 "modoper_level" "850";
159
160 // how often should accounts be expired?
161 "account_expire_freq" "1d";
162
163 // how long until an account with access to any channel(s) expires?
164 "account_expire_delay" "900d";
165
166 // how long until an account with no access to any channels expires?
167 "nochan_account_expire_delay" "365d";
168
169 // If somebody keeps guessing passwords incorrectly, do we gag them?
170 "autogag_enabled" "1";
171 "autogag_duration" "30m";
172 "auth_policer" {
173 "size" "5";
174 "drain-rate" "0.05";
175 };
176
177
178 // How to integrate with email cookies?
179 // In order to use mail, mail must be enabled and configured
180 // down below in the mail section of this config file.
181 "email_enabled" "1"; // Allow account verification and password reset by email.
182 "email_required" "1"; // if above is 1, require verification to authenticate.
183 "cookie_timeout" "2d"; // how long before we expire cookies?
184 "accounts_per_email" "1"; // How many people can use the same email account.
185
186 "email_search_level" "600"; // minimum OpServ level to search based on email address (search print email *foo*)
187 "email_visible_level" "800"; // minimum OpServ level to see somebody's email address
188 "titlehost_suffix" "AfterNET.Org"; // 'USET title' sets a fake hostname of name.title.titlehost on a user.
189 "set_title_level" "900"; // Access to use 'uset title'.
190 "set_fakehost_level" "1000"; //Access to set a freeform fakehost. (uset fakehost)
191
192 // This is a hacked in feature which exports every account change to a file sync.log. Afternet uses this and
193 // a bunch of custom PHP scripts to make our websites SQL user db the same as authserv, every 5 minutes.
194 // You have to be a pretty handy person with the shell commands and programming to make use of this..
195 "sync_log" "0"; // Log account changes to a file for syncing w/ a website?
196 };
197
198 /*
199 * OpServ is the bot opers use to do glines, look at info etc.
200 * Afternet uses the nickname "O3" for this as its easier to type.
201 */
202 "opserv" {
203 "nick" "O3";
204 // should use of this service be limited to global opers?
205 "privileged" "1";
206
207 // fullname for service
208 "description" "Oper Service Bot"; // (for /whois)
209
210 // hostname for service; only used if "description" is also set
211 "hostname" "X3.AfterNET.Services"; // (for /whois)
212
213 // What channel should opserv send debug output to?
214 // I don't have any idea what debug info goes here. You can configure
215 // debugging logs in the log section to go to any channel.
216 // Probably safest to set to your oper channel.
217 "debug_channel" "#TheOps"; // Bot will join this channel, also.
218 "debug_channel_modes" "+tnOS"; // Modes get set every time X3 starts up
219
220 // where to send general alerts (e.g. flood alerts)?
221 "alert_channel" "#TheOps"; // Bot will join this channel, also.
222 "alert_channel_modes" "+"; // Modes get set every time X3 starts up
223
224 // who to tell about staff auths?
225 "staff_auth_channel" "#OperServ"; // Bot will join this channel, also.
226 "staff_auth_channel_modes" "+tnOs"; // modes get set every time X3 starts up
227
228 // how many clones to allow from an untrusted host?
229 // Use this carefully, users with half the # of clones will trigger this
230 // when a server pings out and they reconnect before the old connection is noticed
231 // to be dead by the server.. so set it at about twice the # you want to allow to
232 // avoid false positives.
233 "untrusted_max" "6"; // 3 connections and 3 ghosts, 7th connection causes a gline.
234
235 // how long of a g-line should be issued if the max hosts is exceeded?
236 "clone_gline_duration" "2h"; // durations are smhdmy
237
238 // how long to g-line for ?block (or, by default, for trace gline)?
239 "block_gline_duration" "12h";
240
241 // When a user joins an illegal channel, O3 joins it and locks it down.
242 // how long to keep an illegal channel locked down (seconds)?
243 "purge_lock_delay" "60";
244
245 // The join-flood policer code goes off all the time when a server
246 // goes down (and everyone reconnects) so i don't reccomend using it.
247 // Automatically moderate join flooded channels?
248 "join_flood_moderate" "0";
249 // channel join flood policer params?
250 "join_policer" {
251 "size" "20";
252 "drain-rate" "1";
253 };
254 // Don't moderate and warn channels unless there are more than
255 // join_flood_moderate_threshold users in the channel. the
256 // value 0 will disable the threshold.
257 "join_flood_moderate_threshold" "50";
258 // new user flood policer params
259 "new_user_policer" {
260 "size" "200";
261 "drain-rate" "3";
262 };
263 };
264
265 "chanserv" {
266 "nick" "X3";
267 // Does your ircd have off-channel services support?
268 // Bahamut has it, Nefarious has it, but its inharently flawed and will cause desynch, so don't use it.
269 "off_channel" "no";
270
271 // Infolines are sent when channel users join the channel. Users set them with USET INFO in X3.
272 // how long should a person be unseen before resending infoline?
273 "info_delay" "120";
274
275 // Greetings can be configured by the channel manager(s) and sent to users who join the channel.
276 // Many people (rightly) find this annoying, so keep them short.
277 // maximum greeting length
278 "max_greetlen" "120";
279
280 // maximum users in a channel userlist
281 "max_chan_users" "512";
282 // maximum bans on a channel banlist
283 "max_chan_bans" "512";
284 // maximum length of a user's infoline
285 "max_userinfo_length" "400"; // for god sake lower this. 80 seems good.
286
287 // If SET DynLimit is on and there are N users in the channel, ChanServ will
288 // try to keep the limit at N+<adjust_threshold>. This makes the channel
289 // somewhat protected from clone attacks.
290 "adjust_threshold" "5";
291 // .. but ChanServ will only increment or decrement the limit this often.
292 "adjust_delay" "30"; // (seconds)
293
294 // How often to look for expired bans?
295 "ban_timeout_freq" "2m";
296
297 // How often to look for channels that have expired?
298 "chan_expire_freq" "1d";
299
300 // How long is a channel unvisited (by masters or above) before it can be expired?
301 "chan_expire_delay" "30d";
302
303 // what !set options should we show when user calls "!set" with no arguments?
304 "set_shows" ("DefaultTopic", "TopicMask", "Greeting", "UserGreeting", "Modes", "PubCmd", "InviteMe", "UserInfo", "EnfOps", "EnfModes", "EnfTopic", "TopicSnarf", "Setters", "CtcpReaction", "Voice", "Protect", "Toys", "DynLimit", "NoDelete");
305
306 // A list of !8ball responses
307 "8ball" (
308 "Are you out of your MIND?",
309 "It won't happen, not a chance, definitely no.",
310 "Outlook seems bleak.",
311 "My sources say no.",
312 "You bet!",
313 "It is decidedly so.",
314 "It's hard to be sure.",
315 "Most definitely.",
316 "In your dreams...",
317 "If the prophets wish it...",
318 "Forecast hazy, try again later.",
319 "I don't know!",
320 "Absolutely!",
321 "Never.",
322 "Yes.",
323 "No.",
324 "Maybe.");
325
326 // channel(s) that support helpers must be in to be helping
327 // if this is a list, any one by itself will do
328 "support_channel" ("#Operations", "#Help");
329
330 // maximum number of channels a user may have. ( FORCE can override )
331 "max_owned" "2";
332
333 // how long between automatic topic refreshes with TopicRefresh 0
334 "refresh_period" "99d"; // Nefarious sync's topics so we'll practically disable this..
335
336 // what should !access say for various staff?
337 "irc_operator_epithet" "AfterNET IRC Operator";
338 "network_helper_epithet" "AfterNET Network Helper";
339 "support_helper_epithet" "AfterNET Support Helper";
340
341 // what should a newly registered channel get as its modes?
342 "default_modes" "+nt";
343
344 // minimum opserv access to set, clear or override channel nodelete setting?
345 "nodelete_level" "1";
346 };
347
348 /* Global is a service bot that can send out network-wide messages for you. I
349 * like to set ours' nick to 'AfterNET', but some people use 'Global'
350 */
351 "global" {
352 "nick" "Global";
353 // should users get community announcements by default or not?
354 // community announcements are a type of global that users may
355 // opt into (or out of, depending on this setting)
356 "announcements_default" "on";
357 };
358 };
359
360 /* MODULES (optional components) *************************************************
361 * These must be explicitly compiled in (see ./configure --help)
362 * When enabled, they are configured here..
363 */
364 "modules" {
365 /* Helpserv is a help-queue tracker module for your #support channels, if
366 * they are busy. It issues users tickets, and tracks the next available helper.
367 */
368 "helpserv" {
369 // The description/fullname field
370 "description" "Help Queue Manager"; // (for whois)
371
372 // HelpServ bots log all of their requests to this file, with
373 // details on when they were opened, closed, their contents,
374 // helper, etc. The file is written in saxdb format for easy
375 // parsing by external programs. Please note that you cannot
376 // use ?set to change this value while x3 is running.
377 "reqlogfile" "helpservreq.log";
378
379 // How long should a helpserv be inactive (no requests assigned)
380 // before it can be unregistered by the expire command?
381 "expiration" "60d";
382 };
383 /* SockCheck reads sockcheck.conf and can do configurable scans
384 * to probe for open relays in an attempt to stop drones from using
385 * the network. DO NOT enable this unless you have permission from
386 * your ISP.. the probes will show up as attacks on everyones firewalls
387 * and you will get a lot of complaints.
388 */
389 "sockcheck" {
390 // disabling this hopefully
391 "max_sockets" "0"; // 64 is a good # of concurrent clients to be checked
392 "max_read" "1024"; // don't read more than 1024 bytes from any client
393 "gline_duration" "1d"; // issue G-lines lasting one hour
394 "max_cache_age" "60"; // only cache results for 60 seconds
395 "address" "192.168.1.10"; // do proxy tests from this address
396 };
397 /* Snoop sends connect, quit, join, and part messages for every user
398 * on the network, and helps in finding drones. Put it somewhere secure
399 * so your users privacy is honored.
400 */
401 "snoop" {
402 // Where to send snoop messages?
403 "channel" "#MrSnoopy";
404 // Which bot?
405 "bot" "O3";
406 // Show new users and joins from net joins? (off by default)
407 "show_bursts" "0";
408 };
409 /* Memoserv lets users send messages to other users accounts.
410 */
411 "memoserv" {
412 "bot" "MemoServ";
413 "message_expiry" "30d"; // age when messages are deleted; set
414 // to 0 to disable message expiration
415 };
416 };
417
418 "policers" {
419 "commands-luser" {
420 "size" "5";
421 "drain-rate" "0.5";
422 };
423 };
424
425 "rlimits" {
426 "data" "50M";
427 "stack" "6M";
428 "vmem" "100M";
429 };
430
431 /* MAIL (if and how X3 sends mail ) *********************************
432 * Mainly Authserv/Nickserv send mail, See the Nickserv
433 * section for additional mail settings also.
434 */
435 "mail" {
436 "enable" "1";
437 "mailer" "/usr/sbin/sendmail";
438 // OR Afternet uses a custom script to keep the services IP hidden:
439 // "mailer" "/home/x3user/x3/sendmail.sh";
440 "from_address" "supportrobot@afternet.org";
441 "extra_headers" ("AfterNET-Services: x3");
442 "body_prefix_first" ("Welcome to AfterNET, looks like this is your first email from us.");
443 "body_prefix" ("AfterNET Support - User and Channel registration system");
444 "body_suffix_first" ("", "AfterNET IRC Network", "http://www.afternet.org");
445 "body_suffix" ("", "AfterNET IRC Network", "http://www.afternet.org", "support@afternet.org","irc://irc.afternet.org/afternet");
446 };
447
448 /* DBS (Databases) *************************************************
449 * let you configure what databases go in what files.
450 *
451 * This default sets up everything in one big x3.db file.
452 *
453 * If you leave this section out, each database will be in its own file,
454 * and they will be written out every half hour.
455 */
456 "dbs" {
457 // This just illustrates how you can jam every database into one huge ("mondo") file.
458 "ChanServ" { "mondo_section" "ChanServ"; };
459 "gline" { "mondo_section" "gline"; };
460 "Global" { "mondo_section" "Global"; };
461 "HelpServ" { "mondo_section" "HelpServ"; };
462 "modcmd" { "mondo_section" "modcmd"; };
463 "NickServ" { "mondo_section" "NickServ"; };
464 "OpServ" { "mondo_section" "OpServ"; };
465 "sendmail" { "mondo_section" "sendmail"; };
466
467 // These are the options if you want a database to be in its own file.
468 "mondo" {
469 // Where to put it?
470 "filename" "x3.db";
471 // How often should it be saved?
472 // (You can disable automatic saves by setting this to 0.)
473 "frequency" "30m";
474 };
475 };
476
477 /* LOGS (If and how X3 logs data ) ***********************************
478 * LOGS sets up where X3 logs various kinds of info to.
479 */
480 "logs" {
481 // Two kinds of items exist in this section.
482
483 // One is a facility configuration subsection. These have the
484 // name of a log facility (one of "ChanServ", "Global",
485 // "HelpServ", "NickServ", "OpServ", "ProxyCheck", or "x3") and
486 // the value is a subsection. The "x3" log facility is a
487 // catch-all/fall-back facility.
488 "x3" {
489 // The "max_age" option says how long to keep log audit entries.
490 "max_age" "10h";
491 // The "max_count" option says how many log audit entries to keep.
492 "max_count" "1024";
493 // Audit (command tracking) entries are discarded if they exceed
494 // either limit: for example, if entry 500 is 10 minutes old, it
495 // will be discarded next time any audit command is logged.
496 };
497
498 // The other kind of item is a target list. The name of each is a
499 // description of facility-and-severity combinations, and the value
500 // is a string (or list of strings) that describe where matching
501 // events should be logged. As a special case, the facility * will
502 // specify how to log events regardless of their true facility, and
503 // the severity * will match all severities for a facility.
504 // Log targets use a psuedo-URI syntax: one of "file:filename",
505 // "std:[out|err|n]" where n is a valid file descriptor, or
506 // "irc:#channel" (nicknames or server masks can be used instead
507 // of channel names, but should be used with care).
508 // The severity is one of "replay", "debug", "command", "info",
509 // "override", "staff", "warning", "error", or "fatal".
510 // WARNING: If any severity except "replay" for a facility is left
511 // unspecified, it will use the default target (for example,
512 // "file:chanserv.log"). For "replay" severity, you must ALWAYS
513 // list a target to log it -- this is because it is very rarely
514 // useful.
515 "*.*" ("std:out", "file:everything.log"); // does NOT suppress any defaults
516 "*.override,error,fatal" "irc:#TheOps"; // report all uses of staff commands
517 "*.staff" "irc:#MrSnoopy"; // report all uses of staff commands
518 "ChanServ.*" "file:chanserv.log"; // duplicates the default behavior
519 "ProxyCheck.*" (); // stop it from logging anything
520 };