Graham McIntire
fb5803c866
- bootstrap.yml: support pkg for FreeBSD sudo/python3 install - base role: FreeBSD package sets, sudoers paths, host key regen, admin group, usermod process-in-use tolerance - freebsd role: pkg update/upgrade tasks - general role: standalone hostname tasks (ungated from network.skip), hostname_override support - inspircd role: deploy configs for ca/us manero.org irc servers with vault-backed secrets - uisp role: download and run installer on fresh hosts, skip if already running - netbox role: stop services before usermod to avoid process-in-use failures - hosts: add irc_servers group, ca/us.manero.org (Tailscale), drop staging.towerops.net - all.yml: graham user gets static ed25519 key alongside github keys
183 lines
4.5 KiB
Text
183 lines
4.5 KiB
Text
<define name="networkDomain" value="manero.org">
|
|
<define name="networkName" value="ManeroNet">
|
|
<define name="dir" value="/etc/inspircd">
|
|
|
|
<server
|
|
name="ca.&networkDomain;"
|
|
description="&networkName; IRC server"
|
|
network="&networkName;">
|
|
|
|
<admin
|
|
name="Andy Smith"
|
|
description="Supreme Overlord"
|
|
nick="andys"
|
|
email="andy@nsnw.ca">
|
|
|
|
<bind
|
|
address="*"
|
|
port="6697"
|
|
type="clients"
|
|
sslprofile="sslprofile"
|
|
defer="0"
|
|
ssl="gnutls"
|
|
free="no">
|
|
|
|
<include file="/etc/inspircd/irccloud.conf">
|
|
<include file="/etc/inspircd/thelounge.conf">
|
|
|
|
<connect
|
|
name="main"
|
|
allow="*"
|
|
maxchans="100"
|
|
timeout="20"
|
|
pingfreq="2m"
|
|
hardsendq="1M"
|
|
softsendq="10240"
|
|
recvq="10K"
|
|
threshold="10"
|
|
commandrate="1000"
|
|
fakelag="yes"
|
|
localmax="0"
|
|
globalmax="0"
|
|
resolvehostnames="yes"
|
|
useident="no"
|
|
limit="5000"
|
|
modes="+cx">
|
|
|
|
<cidr
|
|
ipv4clone="32"
|
|
ipv6clone="128">
|
|
|
|
<include file="/etc/inspircd/opers.conf">
|
|
<files motd="/etc/inspircd/motd.txt">
|
|
<dns
|
|
timeout="5">
|
|
<maxlist chan="*" limit="100">
|
|
<options
|
|
prefixquit="Quit: "
|
|
suffixquit=""
|
|
prefixpart="""
|
|
suffixpart="""
|
|
syntaxhints="no"
|
|
cyclehostsfromuser="no"
|
|
announcets="yes"
|
|
allowmismatch="no"
|
|
defaultbind="auto"
|
|
maskinlist="yes"
|
|
maskintopic="yes"
|
|
pingwarning="15"
|
|
serverpingfreq="1m"
|
|
splitwhois="no"
|
|
defaultmodes="not"
|
|
xlinemessage="You're banned! Email irc@&networkDomain; with the ERROR line below for help."
|
|
xlinequit="%fulltype%: %reason%"
|
|
modesinlist="opers"
|
|
extbanformat="name"
|
|
exemptchanops="filter:o nickflood:o nonick:v regmoderated:o"
|
|
invitebypassmodes="yes"
|
|
nosnoticestack="no">
|
|
|
|
<performance
|
|
netbuffersize="10240"
|
|
somaxconn="128"
|
|
softlimit="12800"
|
|
clonesonconnect="yes"
|
|
timeskipwarn="2s"
|
|
quietbursts="yes">
|
|
|
|
<security
|
|
announceinvites="dynamic"
|
|
hideservices="no"
|
|
flatlinks="no"
|
|
hidekills=""
|
|
hideservicekills="yes"
|
|
hidesplits="no"
|
|
maxtargets="20"
|
|
customversion=""
|
|
restrictbannedusers="yes"
|
|
genericoper="no"
|
|
userstats="Pu">
|
|
|
|
<limits
|
|
maxaway="200"
|
|
maxchan="60"
|
|
maxhost="64"
|
|
maxuser="10"
|
|
maxkey="30"
|
|
maxkick="300"
|
|
maxmodes="20"
|
|
maxnick="30"
|
|
maxquit="300"
|
|
maxreal="130"
|
|
maxtopic="330">
|
|
|
|
<log method="file"
|
|
# level="normal"
|
|
level="debug"
|
|
type="* -USERINPUT -USEROUTPUT"
|
|
target="inspircd.log">
|
|
|
|
<whowas
|
|
groupsize="10"
|
|
maxgroups="10000"
|
|
maxkeep="7d"
|
|
nickupdate="yes">
|
|
|
|
<badhost host="root@*" reason="Don't IRC as root!">
|
|
<badhost host="*@198.51.100.0/24" reason="This subnet is bad.">
|
|
|
|
<badnick nick="ChanServ" reason="Reserved For Services">
|
|
<badnick nick="NickServ" reason="Reserved For Services">
|
|
<badnick nick="OperServ" reason="Reserved For Services">
|
|
<badnick nick="MemoServ" reason="Reserved For Services">
|
|
|
|
<exception
|
|
host="*@serverop.com"
|
|
reason="Oper's hostname">
|
|
|
|
<insane
|
|
hostmasks="no"
|
|
ipmasks="no"
|
|
nickmasks="no"
|
|
trigger="95.5">
|
|
|
|
<sslprofile name="sslprofile"
|
|
provider="gnutls"
|
|
certfile="/etc/inspircd/fullchain.cer"
|
|
keyfile="/etc/inspircd/ca.manero.org.key"
|
|
tlsv12="yes">
|
|
|
|
<customprefix name="founder"
|
|
letter="q"
|
|
prefix="~"
|
|
rank="50000"
|
|
ranktoset="50000"
|
|
ranktounset="50000"
|
|
depriv="yes">
|
|
|
|
<customprefix name="admin"
|
|
letter="a"
|
|
prefix="&"
|
|
rank="40000"
|
|
ranktoset="50000"
|
|
ranktounset="50000"
|
|
depriv="yes">
|
|
|
|
<customprefix name="halfop"
|
|
letter="h"
|
|
prefix="%"
|
|
rank="20000"
|
|
ranktoset="30000"
|
|
ranktounset="30000"
|
|
depriv="yes">
|
|
|
|
<cloak method="nickname"
|
|
case="preserve"
|
|
class=""
|
|
invalidchar="strip"
|
|
prefix=""
|
|
suffix=".manero.org">
|
|
|
|
<include file="/etc/inspircd/modules.conf">
|
|
<include file="/etc/inspircd/services/atheme.conf">
|
|
<include file="/etc/inspircd/links.conf">
|