restore atheme to a working state, added stunnel in absence of tls support in atheme

This commit is contained in:
root 2025-01-04 05:34:19 +00:00
parent 24fd350b47
commit 757ee1e161
8 changed files with 344 additions and 307 deletions

View File

@ -1,10 +1,12 @@
FROM ubuntu:latest ARG UBUNTU_VERSION="noble"
FROM ubuntu:${UBUNTU_VERSION}
ARG BUILD_SERVER_NAME="services.lame-network.local" ARG BUILD_SERVER_NAME="services.lame-network.local"
RUN apt -y update RUN apt -y update
RUN apt -y install coreutils perl git automake autoconf build-essential libpcre2-dev rapidjson-dev libcurl4-gnutls-dev libargon2-dev libmaxminddb-dev libldap2-dev rapidjson-dev libmysqlclient-dev libmysqlclient-dev default-libmysqlclient-dev libpq-dev libre2-dev gnutls-dev libsqlite3-dev libmbedtls-dev libqrencode-dev libpcre3-dev libtre-dev pkg-config libwww-perl libidn-dev libpasswdqc-dev libcrack2-dev libperl-dev libsodium-dev cracklib-runtime libcrypt-cracklib-perl sendmail RUN apt -y install coreutils perl git automake autoconf build-essential libpcre2-dev rapidjson-dev libcurl4-gnutls-dev libargon2-dev libmaxminddb-dev libldap2-dev rapidjson-dev libmysqlclient-dev libmysqlclient-dev default-libmysqlclient-dev libpq-dev libre2-dev gnutls-dev libsqlite3-dev libmbedtls-dev libqrencode-dev libpcre3-dev libtre-dev pkg-config libwww-perl libidn-dev libpasswdqc-dev libcrack2-dev libperl-dev libsodium-dev cracklib-runtime libcrypt-cracklib-perl sendmail gettext
RUN groupadd atheme RUN groupadd atheme
@ -12,7 +14,7 @@ RUN useradd --system --shell /bin/bash atheme -g atheme
WORKDIR /tmp WORKDIR /tmp
RUN git clone https://github.com/paigeadelethompson/atheme.git -b inspircd RUN git clone https://github.com/atheme/atheme.git -b master
WORKDIR /tmp/atheme WORKDIR /tmp/atheme
@ -34,13 +36,6 @@ ADD atheme.conf /etc/atheme
ADD include.default.conf /etc/atheme/include.conf ADD include.default.conf /etc/atheme/include.conf
RUN openssl genrsa -out /etc/ssl/atheme/server.key
RUN openssl req -new -key /etc/ssl/atheme/server.key -out /etc/ssl/atheme/server.csr \
-subj "/C=US/ST=Washington/L=Seattle/O=LameNetwork/OU=IT Department/CN=$BUILD_SERVER_NAME"
RUN openssl x509 -req -days 365 -in /etc/ssl/atheme/server.csr -signkey /etc/ssl/atheme/server.key -out /etc/ssl/atheme/server.crt
RUN chown -R atheme:atheme /etc/atheme /etc/ssl/atheme /var/log/atheme RUN chown -R atheme:atheme /etc/atheme /etc/ssl/atheme /var/log/atheme
WORKDIR / WORKDIR /

View File

@ -1,264 +1,264 @@
include "/etc/atheme/include.conf"; loadmodule "/usr/local/modules/protocol/inspircd";
include "/usr/local/etc/include.conf";
#loadmodule "security/cmdperm"; #loadmodule "/usr/local/modules/security/cmdperm";
loadmodule "protocol/inspircd"; #loadmodule "/usr/local/modules/protocol/mixin_nohalfops";
#loadmodule "protocol/mixin_nohalfops"; #loadmodule "/usr/local/modules/protocol/mixin_noholdnick";
#loadmodule "protocol/mixin_noholdnick"; #loadmodule "/usr/local/modules/protocol/mixin_noprotect";
#loadmodule "protocol/mixin_noprotect"; #loadmodule "/usr/local/modules/protocol/mixin_noowner";
#loadmodule "protocol/mixin_noowner"; loadmodule "/usr/local/modules/backend/opensex";
loadmodule "backend/opensex"; #loadmodule "/usr/local/modules/crypto/argon2";
#loadmodule "crypto/argon2"; #loadmodule "/usr/local/modules/crypto/scrypt";
#loadmodule "crypto/scrypt"; #loadmodule "/usr/local/modules/crypto/pbkdf2v2";
#loadmodule "crypto/pbkdf2v2"; #loadmodule "/usr/local/modules/crypto/bcrypt";
#loadmodule "crypto/bcrypt"; #loadmodule "/usr/local/modules/crypto/pbkdf2";
#loadmodule "crypto/pbkdf2"; #loadmodule "/usr/local/modules/crypto/crypt3-sha2-512";
#loadmodule "crypto/crypt3-sha2-512"; #loadmodule "/usr/local/modules/crypto/crypt3-sha2-256";
#loadmodule "crypto/crypt3-sha2-256"; #loadmodule "/usr/local/modules/crypto/crypt3-md5";
#loadmodule "crypto/crypt3-md5"; #loadmodule "/usr/local/modules/crypto/rawsha2-512";
#loadmodule "crypto/rawsha2-512"; #loadmodule "/usr/local/modules/crypto/rawsha2-256";
#loadmodule "crypto/rawsha2-256"; #loadmodule "/usr/local/modules/crypto/anope-enc-sha256";
#loadmodule "crypto/anope-enc-sha256"; #loadmodule "/usr/local/modules/crypto/rawsha1";
#loadmodule "crypto/rawsha1"; #loadmodule "/usr/local/modules/crypto/rawmd5";
#loadmodule "crypto/rawmd5"; #loadmodule "/usr/local/modules/crypto/ircservices";
#loadmodule "crypto/ircservices"; #loadmodule "/usr/local/modules/crypto/crypt3-des";
#loadmodule "crypto/crypt3-des"; #loadmodule "/usr/local/modules/crypto/base64";
#loadmodule "crypto/base64"; #loadmodule "/usr/local/modules/auth/ldap";
#loadmodule "auth/ldap"; loadmodule "/usr/local/modules/nickserv/main";
loadmodule "nickserv/main"; #loadmodule "/usr/local/modules/nickserv/access";
#loadmodule "nickserv/access"; loadmodule "/usr/local/modules/nickserv/badmail";
loadmodule "nickserv/badmail"; loadmodule "/usr/local/modules/nickserv/cert";
loadmodule "nickserv/cert"; loadmodule "/usr/local/modules/nickserv/drop";
loadmodule "nickserv/drop"; loadmodule "/usr/local/modules/nickserv/enforce";
loadmodule "nickserv/enforce"; loadmodule "/usr/local/modules/nickserv/ghost";
loadmodule "nickserv/ghost"; loadmodule "/usr/local/modules/nickserv/group";
loadmodule "nickserv/group"; loadmodule "/usr/local/modules/nickserv/help";
loadmodule "nickserv/help"; loadmodule "/usr/local/modules/nickserv/hold";
loadmodule "nickserv/hold"; loadmodule "/usr/local/modules/nickserv/identify";
loadmodule "nickserv/identify"; loadmodule "/usr/local/modules/nickserv/info";
loadmodule "nickserv/info"; loadmodule "/usr/local/modules/nickserv/info_lastquit";
loadmodule "nickserv/info_lastquit"; loadmodule "/usr/local/modules/nickserv/list";
loadmodule "nickserv/list"; loadmodule "/usr/local/modules/nickserv/listlogins";
loadmodule "nickserv/listlogins"; loadmodule "/usr/local/modules/nickserv/listmail";
loadmodule "nickserv/listmail"; loadmodule "/usr/local/modules/nickserv/listownmail";
loadmodule "nickserv/listownmail"; loadmodule "/usr/local/modules/nickserv/login";
loadmodule "nickserv/login"; loadmodule "/usr/local/modules/nickserv/loginnolimit";
loadmodule "nickserv/loginnolimit"; loadmodule "/usr/local/modules/nickserv/logout";
loadmodule "nickserv/logout"; loadmodule "/usr/local/modules/nickserv/mark";
loadmodule "nickserv/mark"; loadmodule "/usr/local/modules/nickserv/pwquality";
loadmodule "nickserv/pwquality"; loadmodule "/usr/local/modules/nickserv/freeze";
loadmodule "nickserv/freeze"; loadmodule "/usr/local/modules/nickserv/listchans";
loadmodule "nickserv/listchans"; loadmodule "/usr/local/modules/nickserv/listgroups";
loadmodule "nickserv/listgroups"; loadmodule "/usr/local/modules/nickserv/register";
loadmodule "nickserv/register"; loadmodule "/usr/local/modules/nickserv/regnolimit";
loadmodule "nickserv/regnolimit"; loadmodule "/usr/local/modules/nickserv/resetpass";
loadmodule "nickserv/resetpass"; loadmodule "/usr/local/modules/nickserv/restrict";
loadmodule "nickserv/restrict"; loadmodule "/usr/local/modules/nickserv/return";
loadmodule "nickserv/return"; loadmodule "/usr/local/modules/nickserv/setpass";
loadmodule "nickserv/setpass"; loadmodule "/usr/local/modules/nickserv/sendpass";
loadmodule "nickserv/sendpass"; loadmodule "/usr/local/modules/nickserv/sendpass_user";
loadmodule "nickserv/sendpass_user"; loadmodule "/usr/local/modules/nickserv/set_accountname";
loadmodule "nickserv/set_accountname"; loadmodule "/usr/local/modules/nickserv/set_badpasswdmsg";
loadmodule "nickserv/set_badpasswdmsg"; loadmodule "/usr/local/modules/nickserv/set_email";
loadmodule "nickserv/set_email"; loadmodule "/usr/local/modules/nickserv/set_emailmemos";
loadmodule "nickserv/set_emailmemos"; loadmodule "/usr/local/modules/nickserv/set_enforcetime";
loadmodule "nickserv/set_enforcetime"; loadmodule "/usr/local/modules/nickserv/set_hidemail";
loadmodule "nickserv/set_hidemail"; loadmodule "/usr/local/modules/nickserv/set_language";
loadmodule "nickserv/set_language"; loadmodule "/usr/local/modules/nickserv/set_nevergroup";
loadmodule "nickserv/set_nevergroup"; loadmodule "/usr/local/modules/nickserv/set_neverop";
loadmodule "nickserv/set_neverop"; loadmodule "/usr/local/modules/nickserv/set_nogreet";
loadmodule "nickserv/set_nogreet"; loadmodule "/usr/local/modules/nickserv/set_nomemo";
loadmodule "nickserv/set_nomemo"; loadmodule "/usr/local/modules/nickserv/set_noop";
loadmodule "nickserv/set_noop"; loadmodule "/usr/local/modules/nickserv/set_nopassword";
loadmodule "nickserv/set_nopassword"; loadmodule "/usr/local/modules/nickserv/set_password";
loadmodule "nickserv/set_password"; loadmodule "/usr/local/modules/nickserv/set_privmsg";
loadmodule "nickserv/set_privmsg"; loadmodule "/usr/local/modules/nickserv/set_private";
loadmodule "nickserv/set_private"; loadmodule "/usr/local/modules/nickserv/set_property";
loadmodule "nickserv/set_property"; loadmodule "/usr/local/modules/nickserv/set_pubkey";
loadmodule "nickserv/set_pubkey"; loadmodule "/usr/local/modules/nickserv/set_quietchg";
loadmodule "nickserv/set_quietchg"; loadmodule "/usr/local/modules/nickserv/status";
loadmodule "nickserv/status"; loadmodule "/usr/local/modules/nickserv/taxonomy";
loadmodule "nickserv/taxonomy"; loadmodule "/usr/local/modules/nickserv/vacation";
loadmodule "nickserv/vacation"; loadmodule "/usr/local/modules/nickserv/verify";
loadmodule "nickserv/verify"; loadmodule "/usr/local/modules/nickserv/vhost";
loadmodule "nickserv/vhost"; loadmodule "/usr/local/modules/nickserv/waitreg";
loadmodule "nickserv/waitreg"; loadmodule "/usr/local/modules/chanserv/main";
loadmodule "chanserv/main"; loadmodule "/usr/local/modules/chanserv/access";
loadmodule "chanserv/access"; loadmodule "/usr/local/modules/chanserv/akick";
loadmodule "chanserv/akick"; loadmodule "/usr/local/modules/chanserv/ban";
loadmodule "chanserv/ban"; loadmodule "/usr/local/modules/chanserv/unban_self";
loadmodule "chanserv/unban_self"; loadmodule "/usr/local/modules/chanserv/bansearch";
loadmodule "chanserv/bansearch"; loadmodule "/usr/local/modules/chanserv/clone";
loadmodule "chanserv/clone"; loadmodule "/usr/local/modules/chanserv/close";
loadmodule "chanserv/close"; loadmodule "/usr/local/modules/chanserv/clear";
loadmodule "chanserv/clear"; loadmodule "/usr/local/modules/chanserv/clear_akicks";
loadmodule "chanserv/clear_akicks"; loadmodule "/usr/local/modules/chanserv/clear_bans";
loadmodule "chanserv/clear_bans"; loadmodule "/usr/local/modules/chanserv/clear_flags";
loadmodule "chanserv/clear_flags"; loadmodule "/usr/local/modules/chanserv/clear_users";
loadmodule "chanserv/clear_users"; loadmodule "/usr/local/modules/chanserv/count";
loadmodule "chanserv/count"; loadmodule "/usr/local/modules/chanserv/drop";
loadmodule "chanserv/drop"; loadmodule "/usr/local/modules/chanserv/fflags";
loadmodule "chanserv/fflags"; loadmodule "/usr/local/modules/chanserv/flags";
loadmodule "chanserv/flags"; loadmodule "/usr/local/modules/chanserv/ftransfer";
loadmodule "chanserv/ftransfer"; loadmodule "/usr/local/modules/chanserv/getkey";
loadmodule "chanserv/getkey"; loadmodule "/usr/local/modules/chanserv/halfop";
loadmodule "chanserv/halfop"; loadmodule "/usr/local/modules/chanserv/help";
loadmodule "chanserv/help"; loadmodule "/usr/local/modules/chanserv/hold";
loadmodule "chanserv/hold"; loadmodule "/usr/local/modules/chanserv/info";
loadmodule "chanserv/info"; loadmodule "/usr/local/modules/chanserv/invite";
loadmodule "chanserv/invite"; loadmodule "/usr/local/modules/chanserv/kick";
loadmodule "chanserv/kick"; loadmodule "/usr/local/modules/chanserv/list";
loadmodule "chanserv/list"; loadmodule "/usr/local/modules/chanserv/mark";
loadmodule "chanserv/mark"; loadmodule "/usr/local/modules/chanserv/moderate";
loadmodule "chanserv/moderate"; loadmodule "/usr/local/modules/chanserv/op";
loadmodule "chanserv/op"; loadmodule "/usr/local/modules/chanserv/owner";
loadmodule "chanserv/owner"; loadmodule "/usr/local/modules/chanserv/protect";
loadmodule "chanserv/protect"; loadmodule "/usr/local/modules/chanserv/quiet";
loadmodule "chanserv/quiet"; loadmodule "/usr/local/modules/chanserv/recover";
loadmodule "chanserv/recover"; loadmodule "/usr/local/modules/chanserv/register";
loadmodule "chanserv/register"; loadmodule "/usr/local/modules/chanserv/set_email";
loadmodule "chanserv/set_email"; loadmodule "/usr/local/modules/chanserv/set_entrymsg";
loadmodule "chanserv/set_entrymsg"; loadmodule "/usr/local/modules/chanserv/set_fantasy";
loadmodule "chanserv/set_fantasy"; loadmodule "/usr/local/modules/chanserv/set_gameserv";
loadmodule "chanserv/set_gameserv"; loadmodule "/usr/local/modules/chanserv/set_guard";
loadmodule "chanserv/set_guard"; loadmodule "/usr/local/modules/chanserv/set_keeptopic";
loadmodule "chanserv/set_keeptopic"; loadmodule "/usr/local/modules/chanserv/set_limitflags";
loadmodule "chanserv/set_limitflags"; loadmodule "/usr/local/modules/chanserv/set_mlock";
loadmodule "chanserv/set_mlock"; loadmodule "/usr/local/modules/chanserv/set_prefix";
loadmodule "chanserv/set_prefix"; loadmodule "/usr/local/modules/chanserv/set_private";
loadmodule "chanserv/set_private"; loadmodule "/usr/local/modules/chanserv/set_property";
loadmodule "chanserv/set_property"; loadmodule "/usr/local/modules/chanserv/set_pubacl";
loadmodule "chanserv/set_pubacl"; loadmodule "/usr/local/modules/chanserv/set_restricted";
loadmodule "chanserv/set_restricted"; loadmodule "/usr/local/modules/chanserv/set_secure";
loadmodule "chanserv/set_secure"; loadmodule "/usr/local/modules/chanserv/set_topiclock";
loadmodule "chanserv/set_topiclock"; loadmodule "/usr/local/modules/chanserv/set_url";
loadmodule "chanserv/set_url"; loadmodule "/usr/local/modules/chanserv/set_verbose";
loadmodule "chanserv/set_verbose"; loadmodule "/usr/local/modules/chanserv/status";
loadmodule "chanserv/status"; loadmodule "/usr/local/modules/chanserv/sync";
loadmodule "chanserv/sync"; loadmodule "/usr/local/modules/chanserv/successor_acl";
loadmodule "chanserv/successor_acl"; loadmodule "/usr/local/modules/chanserv/taxonomy";
loadmodule "chanserv/taxonomy"; loadmodule "/usr/local/modules/chanserv/template";
loadmodule "chanserv/template"; loadmodule "/usr/local/modules/chanserv/topic";
loadmodule "chanserv/topic"; loadmodule "/usr/local/modules/chanserv/voice";
loadmodule "chanserv/voice"; loadmodule "/usr/local/modules/chanserv/why";
loadmodule "chanserv/why"; loadmodule "/usr/local/modules/chanserv/xop";
loadmodule "chanserv/xop"; loadmodule "/usr/local/modules/chanserv/antiflood";
loadmodule "chanserv/antiflood"; loadmodule "/usr/local/modules/chanfix/main";
loadmodule "chanfix/main"; loadmodule "/usr/local/modules/operserv/akill";
loadmodule "operserv/akill"; loadmodule "/usr/local/modules/operserv/clearchan";
loadmodule "operserv/clearchan"; loadmodule "/usr/local/modules/operserv/clones";
loadmodule "operserv/clones"; loadmodule "/usr/local/modules/operserv/compare";
loadmodule "operserv/compare"; loadmodule "/usr/local/modules/operserv/genhash";
loadmodule "operserv/genhash"; loadmodule "/usr/local/modules/operserv/greplog";
loadmodule "operserv/greplog"; loadmodule "/usr/local/modules/operserv/help";
loadmodule "operserv/help"; loadmodule "/usr/local/modules/operserv/identify";
loadmodule "operserv/identify"; loadmodule "/usr/local/modules/operserv/ignore";
loadmodule "operserv/ignore"; loadmodule "/usr/local/modules/operserv/info";
loadmodule "operserv/info"; loadmodule "/usr/local/modules/operserv/joinrate";
loadmodule "operserv/joinrate"; loadmodule "/usr/local/modules/operserv/jupe";
loadmodule "operserv/jupe"; loadmodule "/usr/local/modules/operserv/mode";
loadmodule "operserv/mode"; loadmodule "/usr/local/modules/operserv/modlist";
loadmodule "operserv/modlist"; loadmodule "/usr/local/modules/operserv/modmanager";
loadmodule "operserv/modmanager"; loadmodule "/usr/local/modules/operserv/noop";
loadmodule "operserv/noop"; loadmodule "/usr/local/modules/operserv/rakill";
loadmodule "operserv/rakill"; loadmodule "/usr/local/modules/operserv/readonly";
loadmodule "operserv/readonly"; loadmodule "/usr/local/modules/operserv/rehash";
loadmodule "operserv/rehash"; loadmodule "/usr/local/modules/operserv/restart";
loadmodule "operserv/restart"; loadmodule "/usr/local/modules/operserv/rmatch";
loadmodule "operserv/rmatch"; loadmodule "/usr/local/modules/operserv/rnc";
loadmodule "operserv/rnc"; loadmodule "/usr/local/modules/operserv/rwatch";
loadmodule "operserv/rwatch"; loadmodule "/usr/local/modules/operserv/set";
loadmodule "operserv/set"; loadmodule "/usr/local/modules/operserv/sgline";
loadmodule "operserv/sgline"; loadmodule "/usr/local/modules/operserv/shutdown";
loadmodule "operserv/shutdown"; loadmodule "/usr/local/modules/operserv/soper";
loadmodule "operserv/soper"; loadmodule "/usr/local/modules/operserv/specs";
loadmodule "operserv/specs"; loadmodule "/usr/local/modules/operserv/sqline";
loadmodule "operserv/sqline"; loadmodule "/usr/local/modules/operserv/update";
loadmodule "operserv/update"; loadmodule "/usr/local/modules/operserv/uptime";
loadmodule "operserv/uptime"; loadmodule "/usr/local/modules/memoserv/help";
loadmodule "memoserv/help"; loadmodule "/usr/local/modules/memoserv/send";
loadmodule "memoserv/send"; loadmodule "/usr/local/modules/memoserv/sendops";
loadmodule "memoserv/sendops"; loadmodule "/usr/local/modules/memoserv/sendgroup";
loadmodule "memoserv/sendgroup"; loadmodule "/usr/local/modules/memoserv/list";
loadmodule "memoserv/list"; loadmodule "/usr/local/modules/memoserv/read";
loadmodule "memoserv/read"; loadmodule "/usr/local/modules/memoserv/forward";
loadmodule "memoserv/forward"; loadmodule "/usr/local/modules/memoserv/delete";
loadmodule "memoserv/delete"; loadmodule "/usr/local/modules/memoserv/ignore";
loadmodule "memoserv/ignore"; loadmodule "/usr/local/modules/global/main";
loadmodule "global/main"; loadmodule "/usr/local/modules/infoserv/main";
loadmodule "infoserv/main"; loadmodule "/usr/local/modules/saslserv/authcookie";
loadmodule "saslserv/authcookie"; loadmodule "/usr/local/modules/saslserv/ecdh-x25519-challenge";
loadmodule "saslserv/ecdh-x25519-challenge"; loadmodule "/usr/local/modules/saslserv/ecdsa-nist256p-challenge";
loadmodule "saslserv/ecdsa-nist256p-challenge"; loadmodule "/usr/local/modules/saslserv/external";
loadmodule "saslserv/external"; loadmodule "/usr/local/modules/saslserv/plain";
loadmodule "saslserv/plain"; loadmodule "/usr/local/modules/saslserv/scram";
loadmodule "saslserv/scram"; loadmodule "/usr/local/modules/gameserv/dice";
loadmodule "gameserv/dice"; loadmodule "/usr/local/modules/gameserv/eightball";
loadmodule "gameserv/eightball"; loadmodule "/usr/local/modules/gameserv/gamecalc";
loadmodule "gameserv/gamecalc"; loadmodule "/usr/local/modules/gameserv/help";
loadmodule "gameserv/help"; loadmodule "/usr/local/modules/gameserv/lottery";
loadmodule "gameserv/lottery"; loadmodule "/usr/local/modules/gameserv/namegen";
loadmodule "gameserv/namegen"; loadmodule "/usr/local/modules/gameserv/rps";
loadmodule "gameserv/rps"; loadmodule "/usr/local/modules/rpgserv/enable";
loadmodule "rpgserv/enable"; loadmodule "/usr/local/modules/rpgserv/help";
loadmodule "rpgserv/help"; loadmodule "/usr/local/modules/rpgserv/info";
loadmodule "rpgserv/info"; loadmodule "/usr/local/modules/rpgserv/list";
loadmodule "rpgserv/list"; loadmodule "/usr/local/modules/rpgserv/search";
loadmodule "rpgserv/search"; loadmodule "/usr/local/modules/rpgserv/set";
loadmodule "rpgserv/set"; loadmodule "/usr/local/modules/botserv/main";
loadmodule "botserv/main"; loadmodule "/usr/local/modules/botserv/help";
loadmodule "botserv/help"; loadmodule "/usr/local/modules/botserv/info";
loadmodule "botserv/info"; loadmodule "/usr/local/modules/botserv/bottalk";
loadmodule "botserv/bottalk"; loadmodule "/usr/local/modules/botserv/set_fantasy";
loadmodule "botserv/set_fantasy"; loadmodule "/usr/local/modules/botserv/set_nobot";
loadmodule "botserv/set_nobot"; loadmodule "/usr/local/modules/botserv/set_private";
loadmodule "botserv/set_private"; loadmodule "/usr/local/modules/botserv/set_saycaller";
loadmodule "botserv/set_saycaller"; loadmodule "/usr/local/modules/hostserv/help";
loadmodule "hostserv/help"; loadmodule "/usr/local/modules/hostserv/onoff";
loadmodule "hostserv/onoff"; loadmodule "/usr/local/modules/hostserv/offer";
loadmodule "hostserv/offer"; loadmodule "/usr/local/modules/hostserv/request";
loadmodule "hostserv/request"; loadmodule "/usr/local/modules/hostserv/vhost";
loadmodule "hostserv/vhost"; loadmodule "/usr/local/modules/hostserv/vhostnick";
loadmodule "hostserv/vhostnick"; loadmodule "/usr/local/modules/hostserv/group";
loadmodule "hostserv/group"; loadmodule "/usr/local/modules/hostserv/drop";
loadmodule "hostserv/drop"; loadmodule "/usr/local/modules/helpserv/helpme";
loadmodule "helpserv/helpme"; loadmodule "/usr/local/modules/helpserv/ticket";
loadmodule "helpserv/ticket"; loadmodule "/usr/local/modules/helpserv/services";
loadmodule "helpserv/services"; loadmodule "/usr/local/modules/alis/main";
loadmodule "alis/main"; loadmodule "/usr/local/modules/statserv/channel";
loadmodule "statserv/channel"; loadmodule "/usr/local/modules/statserv/netsplit";
loadmodule "statserv/netsplit"; loadmodule "/usr/local/modules/statserv/server";
loadmodule "statserv/server"; loadmodule "/usr/local/modules/groupserv/main";
loadmodule "groupserv/main"; loadmodule "/usr/local/modules/groupserv/acsnolimit";
loadmodule "groupserv/acsnolimit"; loadmodule "/usr/local/modules/groupserv/drop";
loadmodule "groupserv/drop"; loadmodule "/usr/local/modules/groupserv/fflags";
loadmodule "groupserv/fflags"; loadmodule "/usr/local/modules/groupserv/flags";
loadmodule "groupserv/flags"; loadmodule "/usr/local/modules/groupserv/help";
loadmodule "groupserv/help"; loadmodule "/usr/local/modules/groupserv/info";
loadmodule "groupserv/info"; loadmodule "/usr/local/modules/groupserv/join";
loadmodule "groupserv/join"; loadmodule "/usr/local/modules/groupserv/list";
loadmodule "groupserv/list"; loadmodule "/usr/local/modules/groupserv/listchans";
loadmodule "groupserv/listchans"; loadmodule "/usr/local/modules/groupserv/register";
loadmodule "groupserv/register"; loadmodule "/usr/local/modules/groupserv/regnolimit";
loadmodule "groupserv/regnolimit"; loadmodule "/usr/local/modules/groupserv/invite";
loadmodule "groupserv/invite"; loadmodule "/usr/local/modules/groupserv/set";
loadmodule "groupserv/set"; loadmodule "/usr/local/modules/groupserv/set_channel";
loadmodule "groupserv/set_channel"; loadmodule "/usr/local/modules/groupserv/set_description";
loadmodule "groupserv/set_description"; loadmodule "/usr/local/modules/groupserv/set_email";
loadmodule "groupserv/set_email"; loadmodule "/usr/local/modules/groupserv/set_groupname";
loadmodule "groupserv/set_groupname"; loadmodule "/usr/local/modules/groupserv/set_joinflags";
loadmodule "groupserv/set_joinflags"; loadmodule "/usr/local/modules/groupserv/set_open";
loadmodule "groupserv/set_open"; loadmodule "/usr/local/modules/groupserv/set_public";
loadmodule "groupserv/set_public"; loadmodule "/usr/local/modules/groupserv/set_url";
loadmodule "groupserv/set_url"; #loadmodule "/usr/local/modules/misc/httpd";
#loadmodule "misc/httpd"; #loadmodule "/usr/local/modules/misc/login_throttling";
#loadmodule "misc/login_throttling"; #loadmodule "/usr/local/modules/transport/xmlrpc";
#loadmodule "transport/xmlrpc"; #loadmodule "/usr/local/modules/exttarget/oper";
#loadmodule "exttarget/oper"; #loadmodule "/usr/local/modules/exttarget/registered";
#loadmodule "exttarget/registered"; #loadmodule "/usr/local/modules/exttarget/channel";
#loadmodule "exttarget/channel"; #loadmodule "/usr/local/modules/exttarget/chanacs";
#loadmodule "exttarget/chanacs"; #loadmodule "/usr/local/modules/exttarget/server";
#loadmodule "exttarget/server"; #loadmodule "/usr/local/modules/proxyscan/dnsbl";
#loadmodule "proxyscan/dnsbl";
crypto { crypto {
# argon2_type = "argon2id"; # argon2_type = "argon2id";
@ -281,8 +281,8 @@ crypto {
nickserv { nickserv {
nick = "NICKSERV"; nick = "NICKSERV";
user = "NICKSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Nickname Services"; real = "Nickname Services";
spam; spam;
no_nick_ownership; no_nick_ownership;
@ -302,8 +302,8 @@ nickserv {
chanserv { chanserv {
nick = "CHANSERV"; nick = "CHANSERV";
user = "CHANSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Channel Services"; real = "Channel Services";
aliases { aliases {
@ -346,8 +346,8 @@ chanserv {
chanfix { chanfix {
nick = "CHANFIX"; nick = "CHANFIX";
user = "CHANFIX"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Channel Fixing Service"; real = "Channel Fixing Service";
aliases { aliases {
@ -362,8 +362,8 @@ chanfix {
global { global {
nick = "GLOBAL"; nick = "GLOBAL";
user = "GLOBAL"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Network Announcements"; real = "Network Announcements";
aliases { aliases {
@ -376,8 +376,8 @@ global {
infoserv { infoserv {
nick = "INFOSERV"; nick = "INFOSERV";
user = "INFOSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Information Service"; real = "Information Service";
aliases { aliases {
@ -394,8 +394,8 @@ infoserv {
operserv { operserv {
nick = "OPERSERV"; nick = "OPERSERV";
user = "OPERSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Operator Services"; real = "Operator Services";
aliases { aliases {
@ -410,8 +410,8 @@ operserv {
saslserv { saslserv {
nick = "SASLSERV"; nick = "SASLSERV";
user = "SASLSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "SASL Authentication Agent"; real = "SASL Authentication Agent";
hide_server_names; hide_server_names;
}; };
@ -419,8 +419,8 @@ saslserv {
memoserv { memoserv {
nick = "MEMOSERV"; nick = "MEMOSERV";
user = "MEMOSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Memo Services"; real = "Memo Services";
aliases { aliases {
@ -435,8 +435,8 @@ memoserv {
gameserv { gameserv {
nick = "GAMESERV"; nick = "GAMESERV";
user = "GAMESERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Game Services"; real = "Game Services";
aliases { aliases {
@ -449,8 +449,8 @@ gameserv {
rpgserv { rpgserv {
nick = "RPGSERV"; nick = "RPGSERV";
user = "RPGSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "RPG Finding Services"; real = "RPG Finding Services";
aliases { aliases {
@ -463,8 +463,8 @@ rpgserv {
botserv { botserv {
nick = "BOTSERV"; nick = "BOTSERV";
user = "BOTSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Bot Services"; real = "Bot Services";
aliases { aliases {
@ -479,8 +479,8 @@ botserv {
groupserv { groupserv {
nick = "GROUPSERV"; nick = "GROUPSERV";
user = "GROUPSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Group Management Services"; real = "Group Management Services";
aliases { aliases {
@ -498,8 +498,8 @@ groupserv {
hostserv { hostserv {
nick = "HOSTSERV"; nick = "HOSTSERV";
user = "HOSTSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Host Management Services"; real = "Host Management Services";
aliases { aliases {
@ -518,8 +518,8 @@ hostserv {
helpserv { helpserv {
nick = "HELPSERV"; nick = "HELPSERV";
user = "HELPSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Help Services"; real = "Help Services";
aliases { aliases {
@ -532,8 +532,8 @@ helpserv {
statserv { statserv {
nick = "STATSERV"; nick = "STATSERV";
user = "STATSERV"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Statistics Services"; real = "Statistics Services";
aliases { aliases {
@ -546,8 +546,8 @@ statserv {
alis { alis {
nick = "ALIS"; nick = "ALIS";
user = "ALIS"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Channel Directory"; real = "Channel Directory";
aliases { aliases {
@ -562,8 +562,8 @@ alis {
proxyscan { proxyscan {
nick = "PROXYSCAN"; nick = "PROXYSCAN";
user = "PROXYSCAN"; user = "_";
host = "services/-"; host = "services/SuperNETs";
real = "Proxyscan Service"; real = "Proxyscan Service";
aliases { aliases {

View File

@ -1 +0,0 @@
SERVER_NAME="services.lame-network.local"

View File

@ -9,8 +9,8 @@ services:
env_file: "config.env" env_file: "config.env"
volumes: volumes:
- data:/etc/atheme - data:/etc/atheme
- ./include.conf:/etc/atheme/include.conf:ro - ./include.conf:/usr/local/etc/include.conf:ro
- ./atheme.conf:/etc/atheme/atheme.conf:ro - ./atheme.conf:/usr/local/etc/atheme.conf:ro
- ssl:/etc/ssl/atheme - ssl:/etc/ssl/atheme
- log:/var/log/atheme - log:/var/log/atheme
volumes: volumes:

1
stunnel/.gitignore vendored Normal file
View File

@ -0,0 +1 @@
stunnel.conf

11
stunnel/Dockerfile Normal file
View File

@ -0,0 +1,11 @@
ARG UBUNTU_VERSION="noble"
FROM ubuntu:${UBUNTU_VERSION}
RUN apt -y update
RUN apt -y install stunnel
ADD stunnel.conf /etc/stunnel/stunnel.conf
CMD stunnel

View File

@ -0,0 +1,20 @@
services:
stunnel:
restart: on-failure:3
build:
context: .
image: stunnel
network_mode: "host"
volumes:
- ../custom/ca.crt:/ca.crt:ro
- ../custom/server.crt:/server.crt:ro
- ../custom/server.key:/server.key:ro
- ./stunnel.conf:/etc/stunnel/stunnel.conf:ro
ulimits:
nofile:
soft: "102400"
hard: "102400"
logging:
driver: "json-file"
options:
max-size: "64k"

View File

@ -0,0 +1,11 @@
foreground = yes
[PKI client]
client = yes
accept = 127.0.0.1:6000
connect = 1.2.3.4:7777
verifyChain = yes
CAfile = /ca.crt
cert = /server.crt
key = /server.key
checkHost = hub.lame-network.local