# file you include will be treated as part of the configuration file #
# which includes it, in simple terms the inclusion is transparent. #
# #
-# All paths to config files are relative to the directory that the #
-# process runs in. #
+# All paths to config files are relative to the config directory. #
# #
# You may also include an executable file, in which case if you do so #
# the output of the executable on the standard output will be added #
#-#-#-#-#-#-#-#-#-#-#-#- PORT CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#-
# #
-# Enter the port and address bindings here. #
+# Configure the port and address bindings here. #
# #
-# #
-# ____ _ _____ _ _ ____ _ _ _ #
-# | _ \ ___ __ _ __| | |_ _| |__ (_)___ | __ )(_) |_| | #
-# | |_) / _ \/ _` |/ _` | | | | '_ \| / __| | _ \| | __| | #
-# | _ < __/ (_| | (_| | | | | | | | \__ \ | |_) | | |_|_| #
-# |_| \_\___|\__,_|\__,_| |_| |_| |_|_|___/ |____/|_|\__(_) #
-# #
-# If you want to link servers to InspIRCd you must load the #
-# spanningtree module! Please see the modules list for #
-# information on how to load this module! If you do not load this #
-# module, server ports will NOT work! #
-# Listener that binds on a TCP/IP endpoint:
+# TLS (SSL) listener that binds on a TCP/IP endpoint:
<bind
# address: IP address to bind to if the box that you are hosting
# on has more than one IP, else the ircd will try to bind to all
# to this bind section.
type="clients"
- # ssl: If you want the port(s) in this bind tag to use TLS (SSL), set this to
- # the name of a custom <sslprofile> tag that you have defined or one
- # of "openssl", "gnutls", "mbedtls" if you have not defined any. See the
- # docs page for the TLS (SSL) module you are using for more details.
+ # sslprofile: If you want the port(s) in this bind tag to use TLS (SSL), set this
+ # to the name of a custom <sslprofile> tag that you have defined. See the
+ # docs page for the TLS (SSL) module you are using for more details:
+ #
+ # GnuTLS: https://docs.inspircd.org/3/modules/ssl_gnutls#sslprofile
+ # mbedTLS: https://docs.inspircd.org/3/modules/ssl_mbedtls#sslprofile
+ # OpenSSL: https://docs.inspircd.org/3/modules/ssl_openssl#sslprofile
#
# You will need to load the ssl_openssl module for OpenSSL, ssl_gnutls
# for GnuTLS and ssl_mbedtls for mbedTLS.
- ssl="gnutls"
+ sslprofile="Clients"
# defer: When this is non-zero, connections will not be handed over to
# the daemon from the operating system before data is ready.
# not have brought the network interfaces up yet.
free="no">
+# Plaintext listener that binds on a TCP/IP endpoint:
+<bind address="" port="6667" type="clients">
+
+
# Listener that binds on a UNIX endpoint (not supported on Windows):
#<bind
# shut down cleanly and left a zombie socket behind.
#replace="yes">
-<bind address="" port="6667" type="clients">
# Listener accepting HTML5 WebSocket connections.
# Requires the websocket module and SHA-1 hashing support (provided by the sha1
# module).
#<bind address="" port="7002" type="clients" hook="websocket">
+
# You can define a custom <sslprofile> tag which defines the TLS (SSL) configuration
-# for this listener. See the docs page for the TLS (SSL) module you are using for
+# for these listeners. See the docs page for the TLS (SSL) module you are using for
# more details.
#
# Alternatively, you can use one of the default TLS (SSL) profiles which are created
# completely link-compatible and can be used alongside each other on each end
# of the link without any significant issues.
-<bind address="" port="7000,7001" type="servers">
-<bind address="1.2.3.4" port="7005" type="servers" ssl="openssl">
-
#-#-#-#-#-#-#-#-#-#- CONNECTIONS CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#
# #
# globalmax: Maximum global (network-wide) connections per IP (or CIDR mask, see below).
globalmax="3"
- # maxconnwarn: Enable warnings when localmax or globalmax are reached (defaults to on)
- maxconnwarn="off"
+ # maxconnwarn: Enable warnings when localmax or globalmax are reached (defaults to yes)
+ maxconnwarn="no"
# resolvehostnames: If disabled, no DNS lookups will be performed on connecting users
# in this class. This can save a lot of resources on very busy servers.
resolvehostnames="yes"
+ # useconnectban: Defines if users in this class should be exempt from connectban limits.
+ # This setting only has effect when the connectban module is loaded.
+ #useconnectban="yes"
+
+ # useconnflood: Defines if users in this class should be exempt from connflood limits.
+ # This setting only has effect when the connflood module is loaded.
+ #useconnflood="yes"
+
# usednsbl: Defines whether or not users in this class are subject to DNSBL. Default is yes.
# This setting only has effect when the dnsbl module is loaded.
#usednsbl="yes"
# immediately killing them; their commands are held in the recvq and processed later
# as the user's command penalty drops. Note that if this is enabled, flooders will
# quit with "RecvQ exceeded" rather than "Excess Flood".
- fakelag="on"
+ fakelag="yes"
# localmax: Maximum local connections per IP.
localmax="3"
# rehash the ircd from the shell or to terminate the ircd from the #
# shell using shell scripts, perl scripts, etc... and to monitor the #
# ircd's state via cron jobs. If this is a relative path, it will be #
-# relative to the configuration directory, and if it is not defined, #
-# the default of 'inspircd.pid' is used. #
+# relative to the runtime directory, and if it is not defined, the #
+# default of 'inspircd.pid' is used. #
# #
#<pid file="/path/to/inspircd.pid">
# - stripcolor Channel mode +S - strips formatting codes from
# messages (requires the stripcolor module).
# - topiclock Channel mode +t - limits changing the topic to (half)ops
- # You can also configure this on a per-channel basis with a channel mode.
- # See m_exemptchanops in modules.conf.example for more details.
+ # You can also configure this on a per-channel basis with a channel mode and
+ # even negate the configured exemptions below.
+ # See exemptchanops in modules.conf.example for more details.
exemptchanops="censor:o filter:o nickflood:o nonick:v regmoderated:o"
# invitebypassmodes: This allows /INVITE to bypass other channel modes.
# connections. If defined, it sets a soft max connections value.
softlimit="12800"
- # clonesonconnect: If this is set to false, we won't check for clones
+ # clonesonconnect: If this is set to no, we won't check for clones
# on initial connection, but only after the DNS check is done.
# This can be useful where your main class is more restrictive
# than some other class a user can be assigned after DNS lookup is complete.
# Turning this option off will make the server spend more time on users we may
# potentially not want. Normally this should be negligible, though.
- # Default value is true
+ # Default value is yes
clonesonconnect="yes"
# timeskipwarn: The time period that a server clock can jump by before
# #
# This configuration tag defines the maximum sizes of various types #
# on IRC, such as the maximum length of a channel name, and the #
-# maximum length of a channel. Note that with the exception of the #
-# identmax value all values given here are the exact values you would #
-# expect to see on IRC. This contrasts with the older InspIRCd #
-# releases where these values would be one character shorter than #
-# defined to account for a null terminator on the end of the text. #
-# #
-# These values should match network-wide otherwise issues will occur. #
+# maximum length of a channel. These values should match network-wide #
+# otherwise issues will occur. #
# #
# The highest safe value you can set any of these options to is 500, #
# but it is recommended that you keep them somewhat #
<badnick
# nick: Nick to disallow. Wildcards are supported.
- nick="ChanServ"
+ nick="Tr0ll123"
# reason: Reason to display on /NICK.
- reason="Reserved for a network service">
+ reason="Don't use this nick.">
<badhost
# host: ident@hostname to ban.