]> jfr.im git - irc/rqf/shadowircd.git/blame - doc/sgml/oper-guide/config.sgml
Document remote D:lines in sgml.
[irc/rqf/shadowircd.git] / doc / sgml / oper-guide / config.sgml
CommitLineData
212380e3 1 <chapter id="config">
2 <title>Server config file format</title>
3 <sect1>
4 <title>General format</title>
5 <para>
6 The config file consists of a series of BIND-style blocks. Each block consists of a series
7 of values inside it which pertain to configuration settings that apply to the given block.
8 </para>
9 <para>
10 Several values take lists of values and have defaults preset inside
11 them. Prefix a keyword with a tilde (~) to override the default and
12 disable it.
13 </para>
14 <para>
15 A line may also be a .include directive, which is of the form <synopsis>.include "<replaceable>file</replaceable>"</synopsis>
16 and causes <replaceable>file</replaceable> to be read in at that point, before the rest of the current file is
17 processed.
18 Relative paths are first tried relative to PREFIX and then relative
19 to ETCPATH (normally PREFIX/etc).
20 </para>
21 <para>
22 Anything from a # to the end of a line is a comment. Blank lines are ignored. C-style comments are also supported.
23 </para>
24 </sect1>
286f7449
JT
25 <sect1 id="configlines">
26 <title>Specific blocks and directives</title>
27 <para>
28 Not all configuration blocks and directives are listed here, only the most common ones. More blocks and directives will
29 be documented in later revisions of this manual.
30 </para>
212380e3 31 <sect2>
32 <title>loadmodule directive</title>
33 <synopsis>
34loadmodule "<replaceable>text</replaceable>";</synopsis>
35 <para>
36 Loads a module into the IRCd. In charybdis 1.1, most modules are automatically loaded in. In future versions, it is
37 intended to remove this behaviour as to allow for easy customization of the IRCd's featureset.
38 </para>
39 </sect2>
40 <sect2>
41 <title>serverinfo {} block</title>
42 <synopsis>
43serverinfo {
44 name = "<replaceable>text</replaceable>";
212380e3 45 sid = "<replaceable>text</replaceable>";
46 description = "<replaceable>text</replaceable>";
47 network_name = "<replaceable>text</replaceable>";
48 network_desc = "<replaceable>text</replaceable>";
49 hub = <replaceable>boolean</replaceable>;
50 vhost = "<replaceable>text</replaceable>";
51 vhost6 = "<replaceable>text</replaceable>";
52};</synopsis>
53 <para>
54 The serverinfo {} block defines the core operational parameters of the IRC server.
55 </para>
56 <variablelist>
57 <title>serverinfo {} variables</title>
58 <varlistentry>
59 <term>name</term>
60 <listitem>
61 <para>
62 The name of the IRC server that you are configuring. This
63 must contain at least one dot. It is not necessarily equal
64 to any DNS name. This must be unique on the IRC network.
65 </para>
66 </listitem>
67 </varlistentry>
212380e3 68 <varlistentry>
69 <term>sid</term>
70 <listitem>
71 <para>
d64fec57 72 A unique ID which describes the server.
212380e3 73 This consists of one digit and two characters which can be
74 digits or letters.
75 </para>
76 </listitem>
77 </varlistentry>
78 <varlistentry>
79 <term>description</term>
80 <listitem>
81 <para>
82 A user-defined field of text which describes the IRC server. This information is used in
83 /links and /whois requests. Geographical location information could be a useful use of
84 this field, but most administrators put a witty saying inside it instead.
85 </para>
86 </listitem>
87 </varlistentry>
88 <varlistentry>
89 <term>network_name</term>
90 <listitem>
91 <para>
92 The name of the IRC network that this server will be a member of.
93 This is used in the welcome message and NETWORK= in 005.
94 </para>
95 </listitem>
96 </varlistentry>
97 <varlistentry>
98 <term>network_desc</term>
99 <listitem>
100 <para>
101 A description of the IRC network that this server will be a member of.
102 This is currently unused.
103 </para>
104 </listitem>
105 </varlistentry>
106 <varlistentry>
107 <term>hub</term>
108 <listitem>
109 <para>
110 A boolean which defines whether or not this IRC server will be serving as a hub, i.e. have multiple servers connected to it.
111 </para>
112 </listitem>
113 </varlistentry>
114 <varlistentry>
115 <term>vhost</term>
116 <listitem>
117 <para>
118 An optional text field which defines an IP from which to connect outward to other IRC servers.
119 </para>
120 </listitem>
121 </varlistentry>
122 <varlistentry>
123 <term>vhost6</term>
124 <listitem>
125 <para>
126 An optional text field which defines an IPv6 IP from which to connect outward to other IRC servers.
127 </para>
128 </listitem>
129 </varlistentry>
130 </variablelist>
131 </sect2>
132 <sect2>
133 <title>admin {} block</title>
134 <synopsis>
135admin {
136 name = "<replaceable>text</replaceable>";
137 description = "<replaceable>text</replaceable>";
138 email = "<replaceable>text</replaceable>";
139};</synopsis>
140 <para>
141 This block provides the information which is returned by the ADMIN command.
142 </para>
143 <variablelist>
144 <title>admin {} variables</title>
145 <varlistentry>
146 <term>name</term>
147 <listitem>
148 <para>The name of the administrator running this service.</para>
149 </listitem>
150 </varlistentry>
151 <varlistentry>
152 <term>description</term>
153 <listitem>
154 <para>The description of the administrator's position in the network.</para>
155 </listitem>
156 </varlistentry>
157 <varlistentry>
158 <term>email</term>
159 <listitem>
160 <para>A point of contact for the administrator, usually an e-mail address.</para>
161 </listitem>
162 </varlistentry>
163 </variablelist>
164 </sect2>
165 <sect2>
166 <title>class {} block</title>
167 <synopsis>
168class "<replaceable>name</replaceable>" {
169 ping_time = <replaceable>duration</replaceable>;
170 number_per_ident = <replaceable>number</replaceable>;
171 number_per_ip = <replaceable>number</replaceable>;
172 number_per_ip_global = <replaceable>number</replaceable>;
173 cidr_bitlen = <replaceable>number</replaceable>;
174 number_per_cidr = <replaceable>number</replaceable>;
175 max_number = <replaceable>number</replaceable>;
176 sendq = <replaceable>size</replaceable>;
177};</synopsis>
178 <synopsis>
179class "<replaceable>name</replaceable>" {
180 ping_time = <replaceable>duration</replaceable>;
181 connectfreq = <replaceable>duration</replaceable>;
182 max_number = <replaceable>number</replaceable>;
183 sendq = <replaceable>size</replaceable>;
184};</synopsis>
185 <para>
186 Class blocks define classes of connections for later use.
187 The class name is used to connect them to
188 other blocks in the config file (auth{} and connect{}).
189 They must be defined before they are used.
190 </para>
191 <para>
192 Classes are used both for client and server connections,
193 but most variables are different.
194 </para>
195 <variablelist>
196 <title>class {} variables: client classes</title>
197 <varlistentry>
198 <term>ping_time</term>
199 <listitem>
200 <para>The amount of time between checking pings for clients, e.g.: 2 minutes</para>
201 </listitem>
202 </varlistentry>
203 <varlistentry>
204 <term>number_per_ident</term>
205 <listitem>
206 <para>The amount of clients which may be connected from a single identd username on a per-IP basis, globally. Unidented clients all count as the same username.</para>
207 </listitem>
208 </varlistentry>
209 <varlistentry>
210 <term>number_per_ip</term>
211 <listitem>
212 <para>The amount of clients which may be connected from a single IP address.</para>
213 </listitem>
214 </varlistentry>
215 <varlistentry>
216 <term>number_per_ip_global</term>
217 <listitem>
218 <para>The amount of clients which may be connected globally from a single IP address.</para>
219 </listitem>
220 </varlistentry>
221 <varlistentry>
222 <term>cidr_bitlen</term>
223 <listitem>
224 <para>The netblock length to use with CIDR-based client limiting for this class.</para>
225 </listitem>
226 </varlistentry>
227 <varlistentry>
228 <term>number_per_cidr</term>
229 <listitem>
230 <para>The amount of clients which may be connected from a single netblock.</para>
231 </listitem>
232 </varlistentry>
233 <varlistentry>
234 <term>max_number</term>
235 <listitem>
236 <para>The maximum amount of clients which may use this class at any given time.</para>
237 </listitem>
238 </varlistentry>
239 <varlistentry>
240 <term>sendq</term>
241 <listitem>
242 <para>The maximum size of the queue of data to be sent to a client before it is dropped.</para>
243 </listitem>
244 </varlistentry>
245 </variablelist>
246 <variablelist>
247 <title>class {} variables: server classes</title>
248 <varlistentry>
249 <term>ping_time</term>
250 <listitem>
251 <para>The amount of time between checking pings for servers, e.g.: 2 minutes</para>
252 </listitem>
253 </varlistentry>
254 <varlistentry>
255 <term>connectfreq</term>
256 <listitem>
257 <para>The amount of time between autoconnects. This must at least be one minute, as autoconnects are evaluated with that granularity.</para>
258 </listitem>
259 </varlistentry>
260 <varlistentry>
261 <term>max_number</term>
262 <listitem>
263 <para>The amount of servers to autoconnect to in this class. More precisely, no autoconnects are done if the number of servers in this class is greater than or equal max_number</para>
264 </listitem>
265 </varlistentry>
266 <varlistentry>
267 <term>sendq</term>
268 <listitem>
269 <para>The maximum size of the queue of data to be sent to a server before it is dropped.</para>
270 </listitem>
271 </varlistentry>
272 </variablelist>
273 </sect2>
274 <sect2>
275 <title>auth {} block</title>
276 <synopsis>
277auth {
278 user = "<replaceable>hostmask</replaceable>";
279 password = "<replaceable>text</replaceable>";
280 spoof = "<replaceable>text</replaceable>";
281 flags = <replaceable>list</replaceable>;
282 class = "<replaceable>text</replaceable>";
283};</synopsis>
284 <para>
285 auth {} blocks allow client connections to the server, and set various properties concerning those connections.
286 </para>
287 <para>
288 Auth blocks are evaluated from top to bottom in priority, so put special blocks first.
289 </para>
290 <variablelist>
291 <title>auth {} variables</title>
292 <varlistentry>
293 <term>user</term>
294 <listitem>
0c304043 295 <para>
296 A hostmask (user@host) that the auth {} block applies to.
297 It is matched against the hostname and IP address (using ::
298 shortening for IPv6 and prepending a 0 if it starts with
299 a colon) and can also use CIDR masks.
300 You can have multiple user entries.
301 </para>
212380e3 302 </listitem>
303 </varlistentry>
304 <varlistentry>
305 <term>password</term>
306 <listitem>
307 <para>
308 An optional password to use for authenticating into this auth{}
309 block. If the password is wrong the user will not be able to
310 connect (will not fall back on another auth{} block).
311 </para>
312 </listitem>
313 </varlistentry>
314 <varlistentry>
315 <term>spoof</term>
316 <listitem>
7c3a2f70 317 <para>An optional fake hostname (or user@host) to apply to users authenticated to this auth{} block. In STATS i and TESTLINE, an equals sign (=) appears before the user@host and the spoof is shown.</para>
212380e3 318 </listitem>
319 </varlistentry>
320 <varlistentry>
321 <term>flags</term>
322 <listitem>
7c3a2f70 323 <para>A list of flags to apply to this auth{} block. They are listed below. Some of the flags appear as a special character, parenthesized in the list, before the user@host in STATS i and TESTLINE.</para>
212380e3 324 </listitem>
325 </varlistentry>
326 <varlistentry>
327 <term>class</term>
328 <listitem>
329 <para>A name of a class to put users matching this auth{} block into.</para>
330 </listitem>
331 </varlistentry>
332 </variablelist>
333 <variablelist>
334 <title>auth {} flags</title>
335 <varlistentry>
336 <term>encrypted</term>
337 <listitem>
338 <para>The password used has been encrypted.</para>
339 </listitem>
340 </varlistentry>
341 <varlistentry>
342 <term>spoof_notice</term>
343 <listitem>
344 <para>Causes the IRCd to send out a server notice when activating a spoof provided by this auth{} block.</para>
345 </listitem>
346 </varlistentry>
347 <varlistentry>
7c3a2f70 348 <term>exceed_limit (&gt;)</term>
212380e3 349 <listitem>
350 <para>Users in this auth{} block can exceed class-wide limitations.</para>
351 </listitem>
352 </varlistentry>
353 <varlistentry>
7c3a2f70 354 <term>dnsbl_exempt ($)</term>
212380e3 355 <listitem>
356 <para>Users in this auth{} block are exempted from DNS blacklist checks. However, they will still be warned if they are listed.</para>
357 </listitem>
358 </varlistentry>
359 <varlistentry>
7c3a2f70 360 <term>kline_exempt (^)</term>
212380e3 361 <listitem>
92506092 362 <para>Users in this auth{} block are exempted from DNS blacklists, k:lines and x:lines.</para>
212380e3 363 </listitem>
364 </varlistentry>
212380e3 365 <varlistentry>
366 <term>spambot_exempt</term>
367 <listitem>
368 <para>Users in this auth{} block are exempted from spambot checks.</para>
369 </listitem>
370 </varlistentry>
371 <varlistentry>
372 <term>shide_exempt</term>
373 <listitem>
374 <para>Users in this auth{} block are exempted from some serverhiding effects.</para>
375 </listitem>
376 </varlistentry>
377 <varlistentry>
378 <term>jupe_exempt</term>
379 <listitem>
380 <para>Users in this auth{} block do not trigger an alarm when joining juped channels.</para>
381 </listitem>
382 </varlistentry>
383 <varlistentry>
384 <term>resv_exempt</term>
385 <listitem>
386 <para>Users in this auth{} block may use reserved nicknames and channels.</para>
387 <note><para>The initial nickname may still not be reserved.</para></note>
388 </listitem>
389 </varlistentry>
390 <varlistentry>
7c3a2f70 391 <term>flood_exempt (|)</term>
212380e3 392 <listitem>
393 <para>
394 Users in this auth{} block may send arbitrary amounts of
395 commands per time unit to the server. This does not exempt
396 them from any other flood limits.
397 You should use this setting with caution.
398 </para>
399 </listitem>
400 </varlistentry>
401 <varlistentry>
7c3a2f70 402 <term>no_tilde (-)</term>
212380e3 403 <listitem>
404 <para>Users in this auth{} block will not have a tilde added to their username if they do not run identd.</para>
405 </listitem>
406 </varlistentry>
407 <varlistentry>
7c3a2f70 408 <term>need_ident (+)</term>
212380e3 409 <listitem>
410 <para>Users in this auth{} block must have identd, otherwise they will be rejected.</para>
411 </listitem>
412 </varlistentry>
413 <varlistentry>
414 <term>need_sasl</term>
415 <listitem>
416 <para>Users in this auth{} block must identify via SASL, otherwise they will be rejected.</para>
417 </listitem>
418 </varlistentry>
419 </variablelist>
420 </sect2>
421 <sect2>
422 <title>exempt {} block</title>
423 <synopsis>
424exempt {
425 ip = "<replaceable>ip</replaceable>";
426};</synopsis>
427 <para>
b808adf9 428 An exempt block specifies IP addresses which are exempt from D:lines
429 and throttling.
212380e3 430 Multiple addresses can be specified in one block.
431 Clients coming from these addresses can still be K/G/X:lined or
432 banned by a DNS blacklist unless
433 they also have appropriate flags in their auth{} block.
434 </para>
435 <variablelist>
436 <title>exempt {} variables</title>
437 <varlistentry>
438 <term>ip</term>
439 <listitem>
440 <para>The IP address or CIDR range to exempt.</para>
441 </listitem>
442 </varlistentry>
443 </variablelist>
444 </sect2>
445 <sect2>
446 <title>operator {} block</title>
447 <synopsis>
448operator "<replaceable>name</replaceable>" {
449 user = "<replaceable>hostmask</replaceable>";
450 password = "<replaceable>text</replaceable>";
451 rsa_public_key_file = "<replaceable>text</replaceable>";
452 umodes = <replaceable>list</replaceable>;
453 snomask = "<replaceable>text</replaceable>";
454 flags = <replaceable>list</replaceable>;
455};</synopsis>
456 <para>
457 Operator blocks define who may use the OPER command to gain extended privileges.
458 </para>
459 <variablelist>
460 <title>operator {} variables</title>
461 <varlistentry>
462 <term>user</term>
463 <listitem>
464 <para>
465 A hostmask that users trying to use this operator {} block
466 must match. This is checked against the original host and IP
467 address; CIDR is also supported. So auth {} spoofs work in
468 operator {} blocks; the real host behind them is not checked.
469 Other kind of spoofs do not work in operator {} blocks; the
470 real host behind them is checked.
471 </para>
472 <para>
473 Note that this is different from charybdis 1.x where all
474 kinds of spoofs worked in operator {} blocks.
475 </para>
476 </listitem>
477 </varlistentry>
478 <varlistentry>
479 <term>password</term>
480 <listitem>
481 <para>
482 A password used with the OPER command to use this operator {} block.
483 Passwords are encrypted by default, but may be unencrypted if ~encrypted is present
484 in the flags list.
485 </para>
486 </listitem>
487 </varlistentry>
488 <varlistentry>
489 <term>rsa_public_key_file</term>
490 <listitem>
491 <para>
492 An optional path to a RSA public key file associated with the operator {} block.
493 This information is used by the CHALLENGE command, which is an alternative authentication
494 scheme to the traditional OPER command.
495 </para>
496 </listitem>
497 </varlistentry>
498 <varlistentry>
499 <term>umodes</term>
500 <listitem>
501 <para>A list of usermodes to apply to successfully opered clients.</para>
502 </listitem>
503 </varlistentry>
504 <varlistentry>
505 <term>snomask</term>
506 <listitem>
507 <para>
508 An snomask to apply to successfully opered clients.
509 </para>
510 </listitem>
511 </varlistentry>
512 <varlistentry>
513 <term>flags</term>
514 <listitem>
515 <para>
516 A listing of privileges granted to operators using this block.
625b1e58
JT
517 By default, the mass_notice, operwall, remoteban and resv privileges are granted;
518 use ~mass_notice, ~operwall, ~remoteban and ~resv to disable them if necessary.
212380e3 519 </para>
520 <para>
521 In addition, a flag designating if the password is encrypted is here.
522 Privileges are documented elsewhere in this guide.
523 </para>
524 </listitem>
525 </varlistentry>
526 </variablelist>
527 </sect2>
528 <sect2>
529 <title>connect {} block</title>
530 <synopsis>
531connect "<replaceable>name</replaceable>" {
532 host = "<replaceable>text</replaceable>";
533 send_password = "<replaceable>text</replaceable>";
534 accept_password = "<replaceable>text</replaceable>";
535 port = <replaceable>number</replaceable>;
536 hub_mask = "<replaceable>mask</replaceable>";
537 leaf_mask = "<replaceable>mask</replaceable>";
538 class = "<replaceable>text</replaceable>";
539 flags = <replaceable>list</replaceable>;
540 aftype = <replaceable>protocol</replaceable>;
541};</synopsis>
542 <para>
543 Connect blocks define what servers may connect or be connected to.
544 </para>
545 <variablelist>
546 <title>connect {} variables</title>
547 <varlistentry>
548 <term>host</term>
549 <listitem>
550 <para>The hostname or IP to connect to.</para>
551 <note><para>
552 Charybdis uses solely DNS for all hostname/address lookups
553 (no <filename>/etc/hosts</filename> or anything else).
554 Furthermore, if a hostname is used, it must have an A or AAAA
555 record (no CNAME) and it must be the primary
556 hostname for inbound connections to work.
0c304043 557 </para><para>
558 IPv6 addresses must be in :: shortened form; addresses which
559 then start with a colon must be prepended with a zero,
560 for example 0::1.
212380e3 561 </para></note>
562 </listitem>
563 </varlistentry>
564 <varlistentry>
565 <term>send_password</term>
566 <listitem>
567 <para>The password to send to the other server.</para>
568 </listitem>
569 </varlistentry>
570 <varlistentry>
571 <term>accept_password</term>
572 <listitem>
573 <para>The password that should be accepted from the other server.</para>
574 </listitem>
575 </varlistentry>
576 <varlistentry>
577 <term>port</term>
578 <listitem>
579 <para>The port on the other server to connect to.</para>
580 </listitem>
581 </varlistentry>
582 <varlistentry>
583 <term>hub_mask</term>
584 <listitem>
585 <para>
586 An optional domain mask of servers allowed to be introduced
587 by this link. Usually, "*" is fine. Multiple hub_masks may be
588 specified, and any of them may be introduced.
589 Violation of hub_mask and leaf_mask restrictions will
590 cause the local link to be closed.
591 </para>
592 </listitem>
593 </varlistentry>
594 <varlistentry>
595 <term>leaf_mask</term>
596 <listitem>
597 <para>
598 An optional domain mask of servers not allowed to be
599 introduced by this link. Multiple leaf_masks may be specified,
600 and none of them may be introduced. leaf_mask has priority
601 over hub_mask.
602 </para>
603 </listitem>
604 </varlistentry>
605 <varlistentry>
606 <term>class</term>
607 <listitem>
608 <para>The name of the class this server should be placed into.</para>
609 </listitem>
610 </varlistentry>
611 <varlistentry>
612 <term>flags</term>
613 <listitem>
614 <para>A list of flags concerning the connect block. They are listed below.</para>
615 </listitem>
616 </varlistentry>
617 <varlistentry>
618 <term>aftype</term>
619 <listitem>
620 <para>The protocol that should be used to connect with, either ipv4 or ipv6. This defaults to ipv4 unless host is a numeric IPv6 address.</para>
621 </listitem>
622 </varlistentry>
623 </variablelist>
624 <variablelist>
625 <title>connect {} flags</title>
626 <varlistentry>
627 <term>encrypted</term>
628 <listitem>
629 <para>The value for accept_password has been encrypted.</para>
630 </listitem>
631 </varlistentry>
632 <varlistentry>
633 <term>autoconn</term>
634 <listitem>
635 <para>
636 The server should automatically try to connect to the server defined in this
637 connect {} block if it's not connected already and max_number
638 in the class is not reached yet.
639 </para>
640 </listitem>
641 </varlistentry>
642 <varlistentry>
643 <term>compressed</term>
644 <listitem>
645 <para>Ziplinks should be used with this server connection.
646 This compresses traffic using zlib, saving some bandwidth
647 and speeding up netbursts.</para>
648 <para>If you have trouble setting up a link, you should
649 turn this off as it often hides error messages.</para>
650 </listitem>
651 </varlistentry>
652 <varlistentry>
653 <term>topicburst</term>
654 <listitem>
655 <para>Topics should be bursted to this server.</para>
c4b513f3 656 <para>This is enabled by default.</para>
212380e3 657 </listitem>
658 </varlistentry>
659 </variablelist>
660 </sect2>
661 <sect2>
662 <title>listen {} block</title>
663 <synopsis>
664listen {
665 host = "<replaceable>text</replaceable>";
666 port = <replaceable>number</replaceable>;
667};</synopsis>
668 <para>
669 A listen block specifies what ports a server should listen on.
670 </para>
671 <variablelist>
672 <title>listen {} variables</title>
673 <varlistentry>
674 <term>host</term>
675 <listitem>
676 <para>An optional host to bind to. Otherwise, the ircd will listen on all available hosts.</para>
677 </listitem>
678 </varlistentry>
679 <varlistentry>
680 <term>port</term>
681 <listitem>
682 <para>
683 A port to listen on. You can specify multiple ports via commas, and define a range by seperating
684 the start and end ports with two dots (..).
685 </para>
686 </listitem>
687 </varlistentry>
688 </variablelist>
689 </sect2>
690 <sect2>
691 <title>modules {} block</title>
692 <synopsis>
693modules {
694 path = "<replaceable>text</replaceable>";
695 module = <replaceable>text</replaceable>;
696};</synopsis>
697 <para>
698 The modules block specifies information for loadable modules.
699 </para>
700 <variablelist>
701 <title>modules {} variables</title>
702 <varlistentry>
703 <term>path</term>
704 <listitem>
705 <para>Specifies a path to search for loadable modules.</para>
706 </listitem>
707 </varlistentry>
708 <varlistentry>
709 <term>module</term>
710 <listitem>
711 <para>
712 Specifies a module to load, similar to loadmodule.
713 </para>
714 </listitem>
715 </varlistentry>
716 </variablelist>
717 </sect2>
718 <sect2>
719 <title>general {} block</title>
720 <synopsis>
721modules {
722 <replaceable>values</replaceable>
723};</synopsis>
724 <para>
725 The general block specifies a variety of options, many of which
726 were in <filename>config.h</filename> in older daemons.
727 The options are documented in <filename>reference.conf</filename>.
728 </para>
729 </sect2>
730 <sect2>
731 <title>channel {} block</title>
732 <synopsis>
733modules {
734 <replaceable>values</replaceable>
735};</synopsis>
736 <para>
737 The channel block specifies a variety of channel-related options,
738 many of which were in <filename>config.h</filename> in older daemons.
739 The options are documented in <filename>reference.conf</filename>.
740 </para>
741 </sect2>
742 <sect2>
743 <title>serverhide {} block</title>
744 <synopsis>
745modules {
746 <replaceable>values</replaceable>
747};</synopsis>
748 <para>
749 The serverhide block specifies options related to server hiding.
750 The options are documented in <filename>reference.conf</filename>.
751 </para>
752 </sect2>
753 <sect2>
754 <title>blacklist {} block</title>
755 <synopsis>
756blacklist {
757 host = "<replaceable>text</replaceable>";
758 reject_reason = "<replaceable>text</replaceable>";
759};</synopsis>
760 <para>
761 The blacklist block specifies DNS blacklists to check.
762 Listed clients will not be allowed to connect.
763 IPv6 clients are not checked against these.
764 </para>
765 <para>
766 Multiple blacklists can be specified, in pairs with first host
767 then reject_reason.
768 </para>
769 <variablelist>
770 <title>blacklist {} variables</title>
771 <varlistentry>
772 <term>host</term>
773 <listitem>
774 <para>The DNSBL to use.</para>
775 </listitem>
776 </varlistentry>
777 <varlistentry>
778 <term>reject_reason</term>
779 <listitem>
780 <para>The reason to send to listed clients when disconnecting them.</para>
781 </listitem>
782 </varlistentry>
783 </variablelist>
784 </sect2>
785 <sect2>
786 <title>alias {} block</title>
787 <synopsis>
788alias "<replaceable>name</replaceable>" {
789 target = "<replaceable>text</replaceable>";
790};</synopsis>
791 <para>
792 Alias blocks allow the definition of custom commands.
793 These commands send PRIVMSG to the given target. A real
794 command takes precedence above an alias.
795 </para>
796 <variablelist>
797 <title>alias {} variables</title>
798 <varlistentry>
799 <term>target</term>
800 <listitem>
801 <para>
802 The target nick (must be a network service (umode +S)) or
803 user@server.
804 In the latter case, the server cannot be this server,
805 only opers can use user starting with "opers" reliably and
806 the user is interpreted on the target server only
807 so you may need to use nick@server instead).
808 </para>
809 </listitem>
810 </varlistentry>
811 </variablelist>
812 </sect2>
813 <sect2>
814 <title>cluster {} block</title>
815 <synopsis>
816cluster {
817 name = "<replaceable>text</replaceable>";
818 flags = <replaceable>list</replaceable>;
819};</synopsis>
820 <para>
821 The cluster block specifies servers we propagate things to
822 automatically.
823 This does not allow them to set bans, you need a separate shared{}
824 block for that.
825 </para>
826 <para>
827 Having overlapping cluster{} items will cause the command to
828 be executed twice on the target servers. This is particularly
829 undesirable for ban removals.
830 </para>
831 <para>
832 The letters in parentheses denote the flags in /stats U.
833 </para>
834 <variablelist>
835 <title>cluster {} variables</title>
836 <varlistentry>
837 <term>name</term>
838 <listitem>
839 <para>The server name to share with, this may contain wildcards
840 and may be stacked.</para>
841 </listitem>
842 </varlistentry>
843 <varlistentry>
844 <term>flags</term>
845 <listitem>
846 <para>The list of what to share, all the name lines above this
847 (up to another flags entry) will receive these flags.
848 They are listed below.</para>
849 </listitem>
850 </varlistentry>
851 </variablelist>
852 <variablelist>
853 <title>cluster {} flags</title>
854 <varlistentry>
855 <term>kline (K)</term>
856 <listitem>
857 <para>Permanent K:lines</para>
858 </listitem>
859 </varlistentry>
860 <varlistentry>
861 <term>tkline (k)</term>
862 <listitem>
863 <para>Temporary K:lines</para>
864 </listitem>
865 </varlistentry>
866 <varlistentry>
867 <term>unkline (U)</term>
868 <listitem>
869 <para>K:line removals</para>
870 </listitem>
871 </varlistentry>
872 <varlistentry>
873 <term>xline (X)</term>
874 <listitem>
875 <para>Permanent X:lines</para>
876 </listitem>
877 </varlistentry>
878 <varlistentry>
879 <term>txline (x)</term>
880 <listitem>
881 <para>Temporary X:lines</para>
882 </listitem>
883 </varlistentry>
884 <varlistentry>
885 <term>unxline (Y)</term>
886 <listitem>
887 <para>X:line removals</para>
888 </listitem>
889 </varlistentry>
890 <varlistentry>
891 <term>resv (Q)</term>
892 <listitem>
893 <para>Permanently reserved nicks/channels</para>
894 </listitem>
895 </varlistentry>
896 <varlistentry>
897 <term>tresv (q)</term>
898 <listitem>
899 <para>Temporarily reserved nicks/channels</para>
900 </listitem>
901 </varlistentry>
902 <varlistentry>
903 <term>unresv (R)</term>
904 <listitem>
905 <para>RESV removals</para>
906 </listitem>
907 </varlistentry>
908 <varlistentry>
909 <term>locops (L)</term>
910 <listitem>
911 <para>LOCOPS messages (sharing this with * makes LOCOPS rather
912 similar to OPERWALL which is not useful)</para>
913 </listitem>
914 </varlistentry>
915 <varlistentry>
916 <term>all</term>
917 <listitem>
918 <para>All of the above</para>
919 </listitem>
920 </varlistentry>
921 </variablelist>
922 </sect2>
923 <sect2>
924 <title>shared {} block</title>
925 <synopsis>
926shared {
927 oper = "<replaceable>user@host</replaceable>", "<replaceable>server</replaceable>";
928 flags = <replaceable>list</replaceable>;
929};</synopsis>
930 <para>
931 The shared block specifies opers allowed to perform certain actions
932 on our server remotely.
933 These are ordered top down. The first one matching will determine
934 the oper's access.
935 If access is denied, the command will be silently ignored.
936 </para>
937 <para>
938 The letters in parentheses denote the flags in /stats U.
939 </para>
940 <variablelist>
941 <title>shared {} variables</title>
942 <varlistentry>
943 <term>oper</term>
944 <listitem>
945 <para>The user@host the oper must have, and the server they must
946 be on. This may contain wildcards.</para>
947 </listitem>
948 </varlistentry>
949 <varlistentry>
950 <term>flags</term>
951 <listitem>
952 <para>The list of what to allow, all the oper lines above this
953 (up to another flags entry) will receive these flags.
954 They are listed below.</para>
955 </listitem>
956 </varlistentry>
957 </variablelist>
958 <note><para>
959 While they have the same names, the flags have subtly different
960 meanings from those in the cluster{} block.
961 </para></note>
962 <variablelist>
963 <title>shared {} flags</title>
964 <varlistentry>
965 <term>kline (K)</term>
966 <listitem>
967 <para>Permanent and temporary K:lines</para>
968 </listitem>
969 </varlistentry>
970 <varlistentry>
971 <term>tkline (k)</term>
972 <listitem>
973 <para>Temporary K:lines</para>
974 </listitem>
975 </varlistentry>
976 <varlistentry>
977 <term>unkline (U)</term>
978 <listitem>
979 <para>K:line removals</para>
980 </listitem>
981 </varlistentry>
982 <varlistentry>
983 <term>xline (X)</term>
984 <listitem>
985 <para>Permanent and temporary X:lines</para>
986 </listitem>
987 </varlistentry>
988 <varlistentry>
989 <term>txline (x)</term>
990 <listitem>
991 <para>Temporary X:lines</para>
992 </listitem>
993 </varlistentry>
994 <varlistentry>
995 <term>unxline (Y)</term>
996 <listitem>
997 <para>X:line removals</para>
998 </listitem>
999 </varlistentry>
1000 <varlistentry>
1001 <term>resv (Q)</term>
1002 <listitem>
1003 <para>Permanently and temporarily reserved nicks/channels</para>
1004 </listitem>
1005 </varlistentry>
1006 <varlistentry>
1007 <term>tresv (q)</term>
1008 <listitem>
1009 <para>Temporarily reserved nicks/channels</para>
1010 </listitem>
1011 </varlistentry>
1012 <varlistentry>
1013 <term>unresv (R)</term>
1014 <listitem>
1015 <para>RESV removals</para>
1016 </listitem>
1017 </varlistentry>
1018 <varlistentry>
1019 <term>all</term>
1020 <listitem>
66a13527 1021 <para>All of the above; this does not include locops, rehash, dline, tdline or undline.</para>
212380e3 1022 </listitem>
1023 </varlistentry>
1024 <varlistentry>
1025 <term>locops (L)</term>
1026 <listitem>
1027 <para>LOCOPS messages (accepting this from * makes LOCOPS rather
1028 similar to OPERWALL which is not useful); unlike the other flags,
1029 this can only be accepted from *@* although it can be
1030 restricted based on source server.</para>
1031 </listitem>
1032 </varlistentry>
1033 <varlistentry>
1034 <term>rehash (H)</term>
1035 <listitem>
1036 <para>REHASH commands; all options can be used</para>
1037 </listitem>
1038 </varlistentry>
66a13527
JT
1039 <varlistentry>
1040 <term>dline (D)</term>
1041 <listitem>
1042 <para>Permanent and temporary D:lines</para>
1043 </listitem>
1044 </varlistentry>
1045 <varlistentry>
1046 <term>tdline (d)</term>
1047 <listitem>
1048 <para>Temporary D:lines</para>
1049 </listitem>
1050 </varlistentry>
1051 <varlistentry>
1052 <term>undline (E)</term>
1053 <listitem>
1054 <para>D:line removals</para>
1055 </listitem>
1056 </varlistentry>
212380e3 1057 <varlistentry>
1058 <term>none</term>
1059 <listitem>
1060 <para>Allow nothing to be done</para>
1061 </listitem>
1062 </varlistentry>
1063 </variablelist>
1064 </sect2>
1065 <sect2>
1066 <title>service {} block</title>
1067 <synopsis>
1068service {
1069 name = "<replaceable>text</replaceable>";
1070};</synopsis>
1071 <para>
1072 The service block specifies privileged servers (services). These
1073 servers have extra privileges such as setting login names on users
1074 and introducing clients with umode +S (unkickable, hide channels, etc).
1075 This does not allow them to set bans, you need a separate shared{}
1076 block for that.
1077 </para>
1078 <para>
1079 Do not place normal servers here.
1080 </para>
1081 <para>
1082 Multiple names may be specified but there may be only one service{}
1083 block.
1084 </para>
1085 <variablelist>
1086 <title>service {} variables</title>
1087 <varlistentry>
1088 <term>name</term>
1089 <listitem>
1090 <para>The server name to grant special privileges. This may not
1091 contain wildcards.</para>
1092 </listitem>
1093 </varlistentry>
1094 </variablelist>
1095 </sect2>
1096 </sect1>
1097 </chapter>
1098<!-- Keep this comment at the end of the file
1099Local variables:
1100mode: sgml
1101sgml-omittag:t
1102sgml-shorttag:t
1103sgml-namecase-general:t
1104sgml-general-insert-case:lower
1105sgml-minimize-attributes:nil
1106sgml-always-quote-attributes:t
1107sgml-indent-step:2
1108sgml-indent-data:t
1109sgml-parent-document: ("dancer-oper-guide.sgml" "book")
1110sgml-exposed-tags:nil
1111fill-column:105
1112sgml-validate-command: "nsgmls -e -g -s -u dancer-oper-guide.sgml"
1113End:
1114-->