From 88b1a6b90403f1bd82b5fba3a37ac92461d431aa Mon Sep 17 00:00:00 2001
From: root <paige@paige.bio>
Date: Wed, 6 Nov 2024 19:02:49 -0500
Subject: [PATCH] backup

---
 anope.conf         | 31 +++++++++++--------------------
 custom/.gitignore  |  8 ++++++++
 docker-compose.yml |  5 ++---
 3 files changed, 21 insertions(+), 23 deletions(-)
 create mode 100644 custom/.gitignore

diff --git a/anope.conf b/anope.conf
index 4e697b0..39759d3 100644
--- a/anope.conf
+++ b/anope.conf
@@ -10,7 +10,7 @@ options
 {
 	user = "anope"
 	group = "anope"
-	casemap = "ascii"
+	casemap = "rfc1459"
 	badpasslimit = 5
 	badpasstimeout = 1m
 	updatetimeout = 2m
@@ -102,19 +102,10 @@ module { name = "enc_posix" }
 
 module { name = "help" }
 
-module
-{
-        ip = 127.53.127.53
-        port = 53
-	name = "dns"
-	nameserver = "/etc/resolv.conf"
-	timeout = 2
-}
-
 module
 {
 	name = "dnsbl"
-	check_on_connect = yes
+	check_on_connect = no
 	check_on_netburst = yes
 	add_to_akill = yes
 
@@ -200,8 +191,9 @@ module { name = "sasl" }
 module
 {
 	name = "ssl_gnutls"
-	cert = "/etc/ssl/anope/server.crt"
-	key = "/etc/ssl/anope/server.key"
+	cert = "/etc/anope/custom/server.crt"
+	key = "/etc/anope/custom/server.key"
+    dhparams = "/etc/anope/custom/dh.pem"
 }
 
 service
@@ -1137,14 +1129,14 @@ module
 	confirmemailchanges = no
 	unregistered_notice = "Your nickname is not registered. To register it, use: /msg NickServ HELP REGISTER"
 	defaults = "killprotect ns_private hide_email hide_mask memo_signon memo_receive autoop"
-	regdelay = 0m
+	regdelay = 8m
 	expire = 32y
 	secureadmins = yes
 	modeonid = yes
 	hidenetsplitquit = no
 	killquick = 20s
 	kill = 60s
-	restrictopernicks = yes
+	restrictopernicks = no
 	enforceruser = "OPERSERV"
 	enforcerhost = "services/_"
 	releasetimeout = 1m
@@ -1365,14 +1357,13 @@ module
 {
 	name = "os_defcon"
 	defaultlevel = 5
-	level4 = "nonewchannels nonewnicks nomlockchanges reducedsessions"
-	level3 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions"
-	level2 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly"
-	level1 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly akillnewclients"
+	level4 = "nonewchannels nonewnicks nonewmemos"
+	level3 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions nonewmemos"
+	level2 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly nonewmemos"
+	level1 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly akillnewclients nonewmemos"
 	sessionlimit = 1024
 	akillexpire = 8m
 	chanmodes = "+R"
-	timeout = 86400s
 	globalondefcon = yes
 	globalondefconmore = yes
 	message = "Server locking down"
diff --git a/custom/.gitignore b/custom/.gitignore
new file mode 100644
index 0000000..d34eb6a
--- /dev/null
+++ b/custom/.gitignore
@@ -0,0 +1,8 @@
+motd.txt
+oper.motd.txt
+include.conf
+*.crt
+*.key
+*.pem
+!ca.crt
+!crl.pem
diff --git a/docker-compose.yml b/docker-compose.yml
index 97a6638..d45d01d 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,5 +1,6 @@
 services:
   anope:
+    restart: on-failure:3
     build:
         context: .
         args:
@@ -8,14 +9,12 @@ services:
     network_mode: "host"
     env_file: "config.env"
     volumes:
+        - ./custom:/etc/anope/custom:ro
         - data:/var/lib/anope
         - ./include.conf:/etc/anope/include.conf:ro
-        - ssl:/etc/ssl/anope
         - log:/var/log/anope
 volumes:
     data:
         name: anope_data
-    ssl:
-        name: anope_ssl
     log:
         name: anope_log