This commit is contained in:
root 2024-11-06 19:02:49 -05:00
parent 1de65843b0
commit 88b1a6b904
3 changed files with 21 additions and 23 deletions

View File

@ -10,7 +10,7 @@ options
{ {
user = "anope" user = "anope"
group = "anope" group = "anope"
casemap = "ascii" casemap = "rfc1459"
badpasslimit = 5 badpasslimit = 5
badpasstimeout = 1m badpasstimeout = 1m
updatetimeout = 2m updatetimeout = 2m
@ -102,19 +102,10 @@ module { name = "enc_posix" }
module { name = "help" } module { name = "help" }
module
{
ip = 127.53.127.53
port = 53
name = "dns"
nameserver = "/etc/resolv.conf"
timeout = 2
}
module module
{ {
name = "dnsbl" name = "dnsbl"
check_on_connect = yes check_on_connect = no
check_on_netburst = yes check_on_netburst = yes
add_to_akill = yes add_to_akill = yes
@ -200,8 +191,9 @@ module { name = "sasl" }
module module
{ {
name = "ssl_gnutls" name = "ssl_gnutls"
cert = "/etc/ssl/anope/server.crt" cert = "/etc/anope/custom/server.crt"
key = "/etc/ssl/anope/server.key" key = "/etc/anope/custom/server.key"
dhparams = "/etc/anope/custom/dh.pem"
} }
service service
@ -1137,14 +1129,14 @@ module
confirmemailchanges = no confirmemailchanges = no
unregistered_notice = "Your nickname is not registered. To register it, use: /msg NickServ HELP REGISTER" unregistered_notice = "Your nickname is not registered. To register it, use: /msg NickServ HELP REGISTER"
defaults = "killprotect ns_private hide_email hide_mask memo_signon memo_receive autoop" defaults = "killprotect ns_private hide_email hide_mask memo_signon memo_receive autoop"
regdelay = 0m regdelay = 8m
expire = 32y expire = 32y
secureadmins = yes secureadmins = yes
modeonid = yes modeonid = yes
hidenetsplitquit = no hidenetsplitquit = no
killquick = 20s killquick = 20s
kill = 60s kill = 60s
restrictopernicks = yes restrictopernicks = no
enforceruser = "OPERSERV" enforceruser = "OPERSERV"
enforcerhost = "services/_" enforcerhost = "services/_"
releasetimeout = 1m releasetimeout = 1m
@ -1365,14 +1357,13 @@ module
{ {
name = "os_defcon" name = "os_defcon"
defaultlevel = 5 defaultlevel = 5
level4 = "nonewchannels nonewnicks nomlockchanges reducedsessions" level4 = "nonewchannels nonewnicks nonewmemos"
level3 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions" level3 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions nonewmemos"
level2 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly" level2 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly nonewmemos"
level1 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly akillnewclients" level1 = "nonewchannels nonewnicks nomlockchanges forcechanmodes reducedsessions silentoperonly akillnewclients nonewmemos"
sessionlimit = 1024 sessionlimit = 1024
akillexpire = 8m akillexpire = 8m
chanmodes = "+R" chanmodes = "+R"
timeout = 86400s
globalondefcon = yes globalondefcon = yes
globalondefconmore = yes globalondefconmore = yes
message = "Server locking down" message = "Server locking down"

8
custom/.gitignore vendored Normal file
View File

@ -0,0 +1,8 @@
motd.txt
oper.motd.txt
include.conf
*.crt
*.key
*.pem
!ca.crt
!crl.pem

View File

@ -1,5 +1,6 @@
services: services:
anope: anope:
restart: on-failure:3
build: build:
context: . context: .
args: args:
@ -8,14 +9,12 @@ services:
network_mode: "host" network_mode: "host"
env_file: "config.env" env_file: "config.env"
volumes: volumes:
- ./custom:/etc/anope/custom:ro
- data:/var/lib/anope - data:/var/lib/anope
- ./include.conf:/etc/anope/include.conf:ro - ./include.conf:/etc/anope/include.conf:ro
- ssl:/etc/ssl/anope
- log:/var/log/anope - log:/var/log/anope
volumes: volumes:
data: data:
name: anope_data name: anope_data
ssl:
name: anope_ssl
log: log:
name: anope_log name: anope_log