diff --git a/anope.conf b/anope.conf index 4e697b0..39759d3 100644 --- a/anope.conf +++ b/anope.conf @@ -10,7 +10,7 @@ options { user = "anope" group = "anope" - casemap = "ascii" + casemap = "rfc1459" badpasslimit = 5 badpasstimeout = 1m updatetimeout = 2m @@ -102,19 +102,10 @@ module { name = "enc_posix" } module { name = "help" } -module -{ - ip = 127.53.127.53 - port = 53 - name = "dns" - nameserver = "/etc/resolv.conf" - timeout = 2 -} - module { name = "dnsbl" - check_on_connect = yes + check_on_connect = no check_on_netburst = yes add_to_akill = yes @@ -200,8 +191,9 @@ module { name = "sasl" } module { name = "ssl_gnutls" - cert = "/etc/ssl/anope/server.crt" - key = "/etc/ssl/anope/server.key" + cert = "/etc/anope/custom/server.crt" + key = "/etc/anope/custom/server.key" + dhparams = "/etc/anope/custom/dh.pem" } service @@ -1137,14 +1129,14 @@ module confirmemailchanges = no unregistered_notice = "Your nickname is not registered. To register it, use: /msg NickServ HELP REGISTER" defaults = "killprotect ns_private hide_email hide_mask memo_signon memo_receive autoop" - regdelay = 0m + regdelay = 8m expire = 32y secureadmins = yes modeonid = yes hidenetsplitquit = no killquick = 20s kill = 60s - restrictopernicks = yes + restrictopernicks = no enforceruser = "OPERSERV" enforcerhost = "services/_" releasetimeout = 1m @@ -1365,14 +1357,13 @@ module { name = "os_defcon" defaultlevel = 5 - level4 = "nonewchannels nonewnicks nomlockchanges reducedsessions" - level3 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions" - level2 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly" - level1 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly akillnewclients" + level4 = "nonewchannels nonewnicks nonewmemos" + level3 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions nonewmemos" + level2 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly nonewmemos" + level1 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly akillnewclients nonewmemos" sessionlimit = 1024 akillexpire = 8m chanmodes = "+R" - timeout = 86400s globalondefcon = yes globalondefconmore = yes message = "Server locking down" diff --git a/custom/.gitignore b/custom/.gitignore new file mode 100644 index 0000000..d34eb6a --- /dev/null +++ b/custom/.gitignore @@ -0,0 +1,8 @@ +motd.txt +oper.motd.txt +include.conf +*.crt +*.key +*.pem +!ca.crt +!crl.pem diff --git a/docker-compose.yml b/docker-compose.yml index 97a6638..d45d01d 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -1,5 +1,6 @@ services: anope: + restart: on-failure:3 build: context: . args: @@ -8,14 +9,12 @@ services: network_mode: "host" env_file: "config.env" volumes: + - ./custom:/etc/anope/custom:ro - data:/var/lib/anope - ./include.conf:/etc/anope/include.conf:ro - - ssl:/etc/ssl/anope - log:/var/log/anope volumes: data: name: anope_data - ssl: - name: anope_ssl log: name: anope_log