This commit is contained in:
root 2021-08-27 23:54:36 +02:00
parent 87f4578d9b
commit 1fa0a9f9fe
20 changed files with 144 additions and 177 deletions

View File

@ -70,7 +70,7 @@ serverinfo
module
{
name = "hybrid";
name = "plexus";
use_server_side_mlock = yes;
use_server_side_topiclock = yes;
}

View File

@ -9,14 +9,14 @@ auth {
user = "*@100.64.65.163";
class = "console_admin";
flags = need_password, exceed_limit, kline_exempt,
xline_exempt, resv_exempt, can_flood, no_tilde;
gline_exempt, resv_exempt, can_flood, no_tilde;
};
auth {
spoof = "h0pm.n3tw3rk.1ns3cur1ty.c0rp";
user = "*@100.64.64.67";
class = "hopm_oper";
flags = need_password, exceed_limit, kline_exempt, xline_exempt, resv_exempt, can_flood, no_tilde;
flags = need_password, exceed_limit, kline_exempt, gline_exempt, resv_exempt, can_flood, no_tilde;
};
auth {

View File

@ -7,7 +7,7 @@
class {
name = "console_admin";
ping_time = 5 seconds;
number_per_ip_local = 1;
# number_per_ip_local = 1;
max_number = 10240;
sendq = 100 kbytes;
max_channels = 256;
@ -24,7 +24,7 @@ class {
class {
name = "hopm_oper";
ping_time = 5 seconds;
number_per_ip_local = 1;
# number_per_ip_local = 1;
max_number = 10240;
sendq = 100 kbytes;
max_channels = 256;

View File

@ -0,0 +1 @@
.include <hb_conf/include/cloak.conf>

View File

@ -21,31 +21,34 @@
.include <hb_conf/general.services.conf>
.include <hb_conf/general.shared.conf>
.include <hb_conf/general.serverhide.conf>
.include <hb_conf/general.cloak.conf>
serverinfo {
name = "irc.am.nl.eu.clandestine.network";
sid = "11X";
description = "n3tw3rk 1ns3cur1ty c0rp0r4t10n";
network_name = "𝓷3𝓽𝔀3𝓻𝓴";
network_description = "General-purpose internet relay chat network";
network_name = "clandestine";
network_desc = "General-purpose internet relay chat network";
hub = no;
default_max_clients = 65465;
max_clients = 65465;
max_nick_length = 30;
max_topic_length = 192;
rsa_private_key_file = "/key.pem";
tls_certificate_file = "/cert.pem";
tls_supported_groups = "X25519:P-256";
tls_cipher_list = "ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA:AES256-SHA";
tls_cipher_suites = "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256";
tls_message_digest_algorithm = "sha256";
};
sslprofile {
name = "default";
identity {
server_name = "irc.am.nl.eu.clandestine.network";
rsa_private_key_file = "/key.pem";
certificate_file = "/cert.pem";
};
cipher_list = "ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA:AES256-SHA";
};
connect {
name = "am.nl.eu.clandestine.network";
host = "100.64.64.2";
port = 7000;
timeout = 1 seconds;
bind = "100.64.64.3";
send_password = "password";
accept_password = "password";
encrypted = no;
@ -67,10 +70,10 @@ listen {
flags = defer;
host = "2001:470:791b:0:100:64:48:10"; # Public IPv6
port = 6667;
flags = defer, tls;
flags = defer, ssl;
host = "100.64.48.10"; # Public TLS
port = 6697;
flags = defer, tls;
flags = defer, ssl;
host = "2001:470:791b:0:100:64:48:10"; # Public IPv6 TLS
port = 6697;
};

View File

@ -9,29 +9,29 @@
general {
cycle_on_host_change = yes;
max_accept = 64;
whowas_history_length = 10240;
dline_min_cidr = 16;
dline_min_cidr6 = 48;
kline_min_cidr = 16;
kline_min_cidr6 = 48;
# whowas_history_length = 10240;
# dline_min_cidr = 16;
# dline_min_cidr6 = 48;
# kline_min_cidr = 16;
# kline_min_cidr6 = 48;
invisible_on_connect = yes;
kill_chase_time_limit = 30 seconds;
disable_auth = no;
default_floodcount = 0;
default_floodtime = 1 second;
# default_floodcount = 0;
# default_floodtime = 1 second;
failed_oper_notice = no;
specials_in_ident = 2;
dots_in_ident = 2;
min_nonwildcard = 4;
min_nonwildcard_simple = 3;
anti_nick_flood = yes;
max_nick_changes = 4;
max_nick_time = 20 seconds;
away_count = 2;
away_time = 10 seconds;
# away_count = 2;
# away_time = 10 seconds;
anti_spam_exit_message_time = 5 minutes;
ts_warn_delta = 3 seconds;
ts_max_delta = 15 seconds;
warn_no_connect_block = yes;
# warn_no_connect_block = yes;
stats_e_disabled = no;
stats_m_oper_only = yes;
stats_o_oper_only = yes;
@ -47,10 +47,10 @@ general {
ping_cookie = no;
no_oper_flood = yes;
max_targets = 4;
oper_only_umodes = cconn, debug, external, farconnect, flood, hidden,
locops, nchange, rej, skill, spy, expiration;
oper_umodes = flood, locops, servnotice, wallop;
throttle_count = 1;
# oper_only_umodes = cconn, debug, external, farconnect, flood, hidden,
# locops, nchange, rej, skill, spy, expiration;
# oper_umodes = flood, locops, servnotice, wallop;
# throttle_count = 1;
throttle_time = 2 seconds;
};

View File

@ -8,25 +8,24 @@ operator {
name = "SCANNER";
user = "*@h0pm.n3tw3rk.1ns3cur1ty.c0rp";
password = "password";
whois = "I'm too lame to read BitchX.doc";
# whois = "I'm too lame to read BitchX.doc";
class = "hopm_oper";
encrypted = no;
umodes = locops, servnotice, wallop, softcallerid, hidden, invisible,
external, rej, skill, hideidle, wallop, expiration, cconn;
flags = admin, connect, connect:remote, die, globops, kill, kill:remote, kline,
module, rehash, restart, set, unkline, unxline, xline;
flags = kill, kill:remote, connect, connect:remote, kline, unkline,
xline, globops, restart, die, rehash, admin, operwall, module;
snomasks = full, rej, skill, link, link:remote, unauth, spy;
umodes = locops, servnotice, operwall, wallop;
};
operator {
name = "SA_NL_EU_01_GENERAL";
user = "*@console.am.nl.eu.clandestine.network";
password = "password";
whois = "I'm too lame to read BitchX.doc";
# whois = "I'm too lame to read BitchX.doc";
class = "console_admin";
encrypted = no;
umodes = locops, servnotice, wallop, softcallerid, hidden,
invisible, external, debug, rej, skill, hideidle,
wallop, expiration;
flags = admin, connect, connect:remote, die, globops, kill, kill:remote,
kline, module, rehash, restart, set, unkline, unxline, xline;
flags = kill, kill:remote, connect, connect:remote, kline, unkline,
xline, globops, restart, die, rehash, admin, operwall, module;
snomasks = full, rej, skill, link, link:remote, unauth, spy;
umodes = locops, servnotice, operwall, wallop;
};

View File

@ -27,9 +27,9 @@ serverinfo {
sid = "10X";
description = "n3tw3rk 1ns3cur1ty c0rp0r4t10n";
network_name = "𝓷3𝓽𝔀3𝓻𝓴";
network_description = "General-purpose internet relay chat network";
network_desc = "General-purpose internet relay chat network";
hub = yes;
default_max_clients = 65465;
max_clients = 65465;
max_nick_length = 30;
max_topic_length = 192;
};
@ -38,8 +38,6 @@ connect {
name = "irc.am.nl.eu.clandestine.network";
host = "100.64.64.3";
port = 7000;
timeout = 1 seconds;
bind = "100.64.64.2";
send_password = "password";
accept_password = "password";
encrypted = no;
@ -50,8 +48,6 @@ connect {
name = "l75rsd7zj7g57s2d6ojvp2oorfssgcdotmceb5r4yjtw4i2tqy23hhad.onion";
host = "100.64.64.11";
port = 7001;
timeout = 1 seconds;
bind = "100.64.64.10";
send_password = "password";
accept_password = "password";
encrypted = no;
@ -62,8 +58,6 @@ connect {
name = "irc.dmz.am.nl.eu.clandestine.network";
host = "100.64.64.19";
port = 7002;
timeout = 1 seconds;
bind = "100.64.64.18";
send_password = "password";
accept_password = "password";
encrypted = no;
@ -74,22 +68,18 @@ connect {
name = "ma.sv.eu.clandestine.network";
host = "100.64.192.6";
port = 7002;
timeout = 1 seconds;
bind = "100.64.192.2";
send_password = "password";
accept_password = "password";
encrypted = no;
class = "hub";
hub_mask = "*";
flags = autoconn;
# flags = autoconn;
};
connect {
name = "1ns3c.ur1.ty";
host = "100.64.64.35";
port = 5555;
timeout = 1 seconds;
bind = "100.64.64.34";
send_password = "password";
accept_password = "password";
encrypted = no;
@ -100,8 +90,7 @@ connect {
name = "operserv.am.nl.eu.clandestine.network";
host = "100.64.64.59";
port = 55555;
timeout = 1 seconds;
bind = "100.64.64.58";
vhost = "100.64.64.58";
send_password = "password";
accept_password = "password";
encrypted = no;
@ -112,19 +101,24 @@ connect {
listen {
host = "100.64.64.42"; # Oper bouncer
port = 6666;
flags = server;
host = "100.64.64.50"; # Console
port = 6665;
flags = server;
host = "100.64.64.34"; # Services
port = 5555;
flags = server;
host = "100.64.64.2"; # General
port = 7000;
flags = server;
host = "100.64.64.10"; # Tor DMZ
port = 7001;
flags = server;
host = "100.64.64.18"; # Proxy DMZ
port = 7002;
flags = server;
host = "100.64.192.2"; # Proxy DMZ
port = 7003;
host = "100.64.64.58"; # OperServ
port = 55555;
flags = server;
};

View File

@ -7,3 +7,11 @@ admin {
description = "𝓪𝓭𝓶𝓲𝓷";
email = "<>";
};
cloak {
name = "HMAC-SHA256";
default = yes;
cloak_key1 = "MyCLoaca";
cloak_key2 = "iSDoingWellande";
cloak_key3 = "TYTYforasking";
};

View File

@ -4,23 +4,9 @@
*/
channel {
enable_extbans = yes;
invite_throttle = 1 minute;
disable_fake_channels = yes;
invite_client_count = 1;
invite_client_time = 5 minutes;
invite_delay_channel = 5 seconds;
invite_expire_time = 1 hour;
knock_client_count = 1;
knock_client_time = 5 minutes;
knock_delay_channel = 1 minute;
/*
* max_channels: the maximum number of channels a user can join/be on.
* This is a default value which can be overriden with class {} blocks.
*/
max_channels = 256;
max_invites = 256;
max_chans_per_user = 256;
max_bans = 256;
max_bans_large = 512;
default_join_flood_count = 16;
default_join_flood_time = 6 seconds;
};

View File

@ -0,0 +1,7 @@
cloak {
name = "HMAC-SHA256";
default = yes;
cloak_key1 = "MyCLoaca";
cloak_key2 = "iSDoingWellande";
cloak_key3 = "TYTYforasking";
};

View File

@ -3,6 +3,8 @@
*/
general {
account_whois = NO;
enable_extbans = yes;
cycle_on_host_change = yes;
max_accept = 64;
whowas_history_length = 10240;
@ -16,7 +18,7 @@ general {
default_floodcount = 100000;
default_floodtime = 1 second;
failed_oper_notice = no;
specials_in_ident = 2;
dots_in_ident = 2;
min_nonwildcard = 4;
min_nonwildcard_simple = 3;
anti_nick_flood = yes;

View File

@ -6,15 +6,12 @@ operator {
name = "xkb";
user = "*@*";
password = "l4m3r";
whois = "I'm too lame to read BitchX.doc";
# whois = "I'm too lame to read BitchX.doc";
class = "globop";
encrypted = no;
umodes = bot, cconn, deaf, debug, external, farconnect, flood, softcallerid, callerid,
hidden, invisible, rej, skill, locops, nchange, hidechans, hideidle, nononreg,
servnotice, wallop, expiration, spy;
flags = admin, close, connect, connect:remote, die, dline, globops, join:resv, kill,
kill:remote, kline, locops, module, nick:resv, opme, rehash, rehash:remote,
remoteban, restart, resv, set, squit, squit:remote, undline, unkline, unresv,
unxline, wallops, xline;
flags = kill, kill:remote, connect, connect:remote, kline, unkline,
xline, globops, restart, die, rehash, admin, operwall, module;
snomasks = full, rej, skill, link, link:remote, unauth, spy;
umodes = locops, servnotice, operwall, wallop;
};

View File

@ -2,81 +2,74 @@
* https://github.com/ircd-hybrid/ircd-hybrid/blob/master/doc/reference.conf
*/
pseudo {
command = "IDENTIFY";
prepend = "IDENTIFY ";
name = "NICKSERV";
target = "NICKSERV@1ns3c.ur1.ty";
};
pseudo {
command = "CHANSERV";
alias {
name = "CHANSERV";
name = "CHANSERV";
target = "CHANSERV@1ns3c.ur1.ty";
user = "CHANSERV@1ns3c.ur1.ty";
};
pseudo {
command = "CS";
alias {
name = "CS";
name = "CHANSERV";
target = "CHANSERV@1ns3c.ur1.ty";
user = "CHANSERV@1ns3c.ur1.ty";
};
pseudo {
command = "NICKSERV";
alias {
name = "NICKSERV";
name = "NICKSERV";
target = "NICKSERV@1ns3c.ur1.ty";
user = "NICKSERV@1ns3c.ur1.ty";
};
pseudo {
command = "NS";
alias {
name = "NS";
name = "NICKSERV";
target = "NICKSERV@1ns3c.ur1.ty";
user = "NICKSERV@1ns3c.ur1.ty";
};
pseudo {
command = "MEMOSERV";
alias {
name = "MEMOSERV";
name = "MEMOSERV";
target = "MEMOSERV@1ns3c.ur1.ty";
user = "MEMOSERV@1ns3c.ur1.ty";
};
pseudo {
command = "MS";
alias {
name = "MS";
name = "MEMOSERV";
target = "MEMOSERV@1ns3c.ur1.ty";
user = "MEMOSERV@1ns3c.ur1.ty";
};
pseudo {
command = "OPERSERV";
alias {
name = "OPERSERV";
name = "OPERSERV";
target = "OPERSERV@1ns3c.ur1.ty";
user = "OPERSERV@1ns3c.ur1.ty";
};
pseudo {
command = "OS";
alias {
name = "OS";
name = "OPERSERV";
target = "OPERSERV@1ns3c.ur1.ty";
user = "OPERSERV@1ns3c.ur1.ty";
};
pseudo {
command = "HOSTSERV";
alias {
name = "HOSTSERV";
name = "HOSTSERV";
target = "HOSTSERV@1ns3c.ur1.ty";
user = "HOSTSERV@1ns3c.ur1.ty";
};
pseudo {
command = "HS";
alias {
name = "HS";
name = "HOSTSERV";
target = "HOSTSERV@1ns3c.ur1.ty";
user = "HOSTSERV@1ns3c.ur1.ty";
};
pseudo {
command = "BOTSERV";
alias {
name = "BOTSERV";
name = "BOTSERV";
target = "BOTSERV@1ns3c.ur1.ty";
user = "BOTSERV@1ns3c.ur1.ty";
};
pseudo {
command = "BS";
alias {
name = "BS";
name = "BOTSERV";
target = "BOTSERV@1ns3c.ur1.ty";
user = "BOTSERV@1ns3c.ur1.ty";
};

View File

@ -5,8 +5,6 @@
class {
name = "general_users";
ping_time = 256 seconds;
number_per_ip_local = 4;
number_per_ip_global = 8;
max_number = 1024000;
cidr_bitlen_ipv4 = 24;
cidr_bitlen_ipv6 = 120;
@ -17,8 +15,6 @@ class {
class {
name = "tor_dmz_users";
ping_time = 128 seconds;
number_per_ip_local = 128;
number_per_ip_global = 256;
max_number = 1024000;
cidr_bitlen_ipv4 = 24;
cidr_bitlen_ipv6 = 120;
@ -30,8 +26,6 @@ class {
class {
name = "mibbit_dmz_users";
ping_time = 256 seconds;
number_per_ip_local = 128;
number_per_ip_global = 256;
max_number = 1024000;
cidr_bitlen_ipv4 = 24;
cidr_bitlen_ipv6 = 120;
@ -42,8 +36,6 @@ class {
class {
name = "kiwiirc_dmz_users";
ping_time = 256 seconds;
number_per_ip_local = 1024;
number_per_ip_global = 10240;
max_number = 1024000;
cidr_bitlen_ipv4 = 24;
cidr_bitlen_ipv6 = 120;
@ -54,8 +46,6 @@ class {
class {
name = "lounge_dmz_users";
ping_time = 32 seconds;
number_per_ip_local = 1024;
number_per_ip_global = 10240;
max_number = 1024000;
cidr_bitlen_ipv4 = 24;
cidr_bitlen_ipv6 = 120;
@ -66,8 +56,6 @@ class {
class {
name = "proxy_dmz_users";
ping_time = 32 seconds;
number_per_ip_local = 1024;
number_per_ip_global = 10240;
max_number = 1024000;
cidr_bitlen_ipv4 = 24;
cidr_bitlen_ipv6 = 120;
@ -78,7 +66,6 @@ class {
class {
name = "globop";
ping_time = 32 seconds;
number_per_ip_local = 1;
max_number = 10240;
sendq = 100 kbytes;
max_channels = 256;

View File

@ -9,7 +9,7 @@ auth {
user = "*@100.64.65.227";
class = "console_admin";
flags = need_password, exceed_limit, kline_exempt,
xline_exempt, resv_exempt, can_flood, no_tilde;
gline_exempt, resv_exempt, can_flood, no_tilde;
};
auth {

View File

@ -7,7 +7,6 @@
class {
name = "console_admin";
ping_time = 2 seconds;
number_per_ip_local = 1;
max_number = 10240;
sendq = 1 megabyte;
max_channels = 60;

View File

@ -27,25 +27,27 @@ serverinfo {
sid = "12X";
description = "n3tw3rk 1ns3cur1ty c0rp0r4t10n pr0xy dmz";
network_name = "𝓷3𝓽𝔀3𝓻𝓴";
network_description = "General-purpose internet relay chat network";
network_desc = "General-purpose internet relay chat network";
hub = no;
default_max_clients = 65465;
max_clients = 65465;
max_nick_length = 30;
max_topic_length = 192;
rsa_private_key_file = "/key.pem";
tls_certificate_file = "/cert.pem";
tls_supported_groups = "X25519:P-256";
tls_cipher_list = "ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA:AES256-SHA";
tls_cipher_suites = "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256";
tls_message_digest_algorithm = "sha256";
};
sslprofile {
name = "default";
identity {
server_name = "irc.dmz.am.nl.eu.clandestine.network";
rsa_private_key_file = "/key.pem";
certificate_file = "/cert.pem";
};
cipher_list = "ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA:AES256-SHA";
};
connect {
name = "am.nl.eu.clandestine.network";
host = "100.64.64.18";
port = 7002;
timeout = 1 seconds;
bind = "100.64.64.19";
send_password = "password";
accept_password = "password";
encrypted = no;
@ -63,11 +65,11 @@ listen {
host = "100.64.48.18"; # Public Incoming
port = 6667;
host = "100.64.48.18"; # Public TLS
ssl_profile = "default";
flags = defer, ssl;
port = 6697;
flags = defer, tls;
host = "100.64.69.2"; # The Lounge
flags = defer, ssl;
port = 4242;
flags = defer, tls;
};

View File

@ -7,31 +7,24 @@
*/
general {
account_whois = NO;
enable_extbans = yes;
cycle_on_host_change = yes;
max_accept = 64;
whowas_history_length = 10240;
dline_min_cidr = 16;
dline_min_cidr6 = 48;
kline_min_cidr = 16;
kline_min_cidr6 = 48;
invisible_on_connect = yes;
kill_chase_time_limit = 30 seconds;
disable_auth = no;
default_floodcount = 100000;
default_floodtime = 1 second;
failed_oper_notice = no;
specials_in_ident = 2;
dots_in_ident = 2;
min_nonwildcard = 4;
min_nonwildcard_simple = 3;
anti_nick_flood = yes;
max_nick_changes = 4;
max_nick_time = 20 seconds;
away_count = 2;
away_time = 10 seconds;
anti_spam_exit_message_time = 5 minutes;
ts_warn_delta = 3 seconds;
ts_max_delta = 15 seconds;
warn_no_connect_block = yes;
stats_e_disabled = yes;
stats_m_oper_only = yes;
stats_o_oper_only = yes;
@ -47,10 +40,8 @@ general {
ping_cookie = no;
no_oper_flood = yes;
max_targets = 4;
oper_only_umodes = cconn, debug, external, farconnect, flood, hidden,
locops, nchange, rej, skill, spy, expiration;
oper_umodes = flood, locops, servnotice, wallop;
throttle_count = 1;
oper_only_umodes = servnotice, operwall, locops, spy;
oper_umodes = locops, servnotice, operwall;
throttle_time = 2 seconds;
};

View File

@ -8,12 +8,10 @@ operator {
name = "SA_NL_EU_01_DMZ";
user = "*@console.am.nl.eu.clandestine.network";
password = "password";
whois = "I'm too lame to read BitchX.doc";
class = "console_admin";
encrypted = no;
umodes = locops, servnotice, wallop, softcallerid, hidden,
invisible, external, debug, rej, skill, hideidle,
wallop, expiration;
flags = admin, connect, connect:remote, die, globops, kill, kill:remote,
kline, module, rehash, restart, set, unkline, unxline, xline;
flags = kill, kill:remote, connect, connect:remote, kline, unkline,
xline, globops, restart, die, rehash, admin, operwall, module;
snomasks = full, rej, skill, link, link:remote, unauth, spy;
umodes = locops, servnotice, operwall, wallop;
};