admin { ""; }

alias botserv { type services; }
alias bs { target botserv; type services; }
alias chanserv { type services; }
alias cs { target chanserv; type services; }
alias hostserv { type services; }
alias hs { target hostserv; type services; }
alias nickserv { type services; }
alias ns { target nickserv; type services; }
alias operserv { type services; }
alias os { target operserv; type services; }

class clients { pingfreq 120; maxclients 100; sendq 1M; options { nofakelag; } }
class servers { pingfreq 120; maxclients  10; sendq 1M; connfreq 30;           }

allow { mask *;         class clients; maxperip 2;  global-maxperip 2;  }
allow { mask 127.0.0.1; class clients; maxperip 10; global-maxperip 10; }

#require authentication {
#	mask *@*;
#	reason "8,4   E N T E R   T H E   V O I D   ";
#}

listen { ip *; port 6667;      options { clientsonly;      } }
listen { ip *; port 6697;      options { clientsonly; tls; } }
listen { ip *; port REDACTED;  options { serversonly; tls; } }

deny channel { channel "#dev";      reason "This channel has moved to #superbowl"; redirect "#superbowl"; }
deny channel { channel "#help";     reason "This channel has moved to #superbowl"; redirect "#superbowl"; }
deny channel { channel "#mensa";    reason "This channel has been closed";         redirect "#superbowl"; }
deny channel { channel "#pumpcoin"; reason "This channel has moved to #exchange";  redirect "#exchange";  }

link irc.supernets.org {
	incoming { mask REDACTED; }
	outgoing {
		bind-ip *;
		hostname REDACTED;
		port REDACTED;
		options { tls; autoconnect; }
	}
	password "REDACTED" { spkifp; }
	class servers;
}

log {
	source { error; fatal; warn; }
	destination { file "ircd.log" { maxsize 10M; } }
}

log {
	source { all; }
	destination { channel "#REDACTED" }
}

tld { mask *@*; motd remote.motd; rules remote.motd; options { remote; } }

ulines { services.supernets.org; }

blacklist dronebl {
	dns {
		name dnsbl.dronebl.org;
		type record;
		reply { 3; 5; 6; 7; 8; 9; 10; 11; 12; 13; 14; 15; 16; }
	}
	action gzline;
	ban-time 30d;
	reason "8,4   E N T E R   T H E   V O I D   ";
}

blacklist efnetrbl {
	dns {
		name rbl.efnetrbl.org;
		type record;
		reply { 1; 4; 5; }
	}
	action gzline;
	ban-time 30d;
	reason "8,4   E N T E R   T H E   V O I D   ";
}

blacklist torbl {
	dns {
		name torexit.dan.me.uk;
		type record;
		reply { 100; }
	}
	action gzline;
	ban-time 30d;
	reason "8,4   E N T E R   T H E   V O I D   ";
}

set {
	kline-address "enterthevoid@supernets.org";
	gline-address "enterthevoid@supernets.org";
	modes-on-connect "+iIpTx";
	modes-on-oper "+Hq";
	snomask-on-oper "+bBcCfksSoO";
	modes-on-join "+ns";
	level-on-join "op";
	restrict-usermodes "ips";
	restrict-channelmodes "nLpPs";
	restrict-commands {
		channel-message { connect-delay 60;  exempt-identified yes; exempt-reputation-score 100; }
		channel-notice  { connect-delay 60;  exempt-identified yes; exempt-reputation-score 100; }
		invite          { connect-delay 300; exempt-identified yes; exempt-reputation-score 100; }
		join            { connect-delay 15;  exempt-identified yes; exempt-reputation-score 100; }
		list            { connect-delay 30;  exempt-identified yes; exempt-reputation-score 100; }
		private-message { connect-delay 300; exempt-identified yes; exempt-reputation-score 100; }
		private-notice  { connect-delay 300; exempt-identified yes; exempt-reputation-score 100; }
	}
	auto-join "#superbowl";
	static-quit "EMO-QUIT";
	static-part "EMO-PART";
	nick-length 20;
	maxchannelsperuser 10;
	channel-command-prefix "`!@$.";
	options { hide-ulines; flat-map; identd-check; }
	network-name "SuperNETs";
	default-server "irc.supernets.org";
	services-server "services.supernets.org";
	sasl-server "services.supernets.org";
	help-channel "#superbowl";
	cloak-method ip;
	cloak-keys {
		"REDACTED";
		"REDACTED";
		"REDACTED";
	}
	hiddenhost-prefix "SUPER";
	plaintext-policy {
		user warn;
		oper deny;
		server deny;
		user-message "4WARNING: You are not on a secure TLS connection";
		oper-message "Network operators must be on a secure TLS connection";
	}
	outdated-tls-policy {
		user warn;
		oper deny;
		server deny;
		user-message "4WARNING: You are using an outdated SSL/TLS protocol or cipher";
		oper-message "Network operators must be using an up-to-date SSL/TLS protocol & cipher";
	}
	anti-flood {
		everyone {
			connect-flood 3:300;
			handshake-data-flood {
				amount 4k;
				ban-action gzline;
				ban-time 1h;
			}
			#target-flood {
			#	channel-notice  15:5;
			#	channel-privmsg 45:5;
			#	channel-tagmsg  15:5;
			#	private-notice  10:5;
			#	private-privmsg 30:5;
			#	private-tagmsg  10:5;
			#}
		}
		known-users {
			away-flood   3:300;
			invite-flood 3:300;
			join-flood   3:300;
			knock-flood  3:300;
			nick-flood   3:300;
			max-concurrent-conversations {
				users 5;
				new-user-every 60s;
			}
			lag-penalty 10; # update?
			lag-penalty-bytes 0;
		}
		unknown-users {
			away-flood   3:300;
			invite-flood 3:300;
			join-flood   3:300;
			knock-flood  3:300;
			nick-flood   3:300;
			max-concurrent-conversations {
				users 3;
				new-user-every 60s;
			}
			lag-penalty 1000;
			lag-penalty-bytes 90;
		}
	}
	default-bantime 30d;
	modef-default-unsettime 5;
	spamfilter {
		ban-time 1d;
		ban-reason "8,4   E N T E R   T H E   V O I D   ";
		except "#anythinggoes";
	}
	max-targets-per-command { kick 1; part 1; privmsg 1; }
	hide-ban-reason yes;
	reject-message {
		gline                "8,4   E N T E R   T H E   V O I D   ";
		kline                "8,4   E N T E R   T H E   V O I D   ";
		password-mismatch    "8,4   E N T E R   T H E   V O I D   ";
		server-full          "8,4   E N T E R   T H E   V O I D   ";
		too-many-connections "8,4   E N T E R   T H E   V O I D   ";
		unauthorized         "8,4   E N T E R   T H E   V O I D   ";
	}
	antimixedutf8 {
		score 8;
		ban-action block;
		ban-reason "8,4   E N T E R   T H E   V O I D   ";
	}
	connthrottle {
		known-users   { minimum-reputation-score 25; sasl-bypass yes;       }
		new-users     { local-throttle 20:60;        global-throttle 30:60; }
		disabled-when { reputation-gathering 1w;     start-delay 3m;        }
	}
	history {
		channel {
			playback-on-join { lines 1000; time 1d; }
			max-storage-per-channel {
				registered   { lines 1000; time 1d; } 
				unregistered { lines 100;  time 1h; } 
			}
		}
	}
	hide-idle-time { policy always; }
	whois-details {
		basic           { everyone full; }
		modes           { everyone none;    self full; oper full; }
		realhost        { everyone none;    self full; oper full; }
		registered-nick { everyone full; }
		channels        { everyone limited; self full; oper full; }
		server          { everyone full; }
		away            { everyone full; }
		oper            { everyone limited; self full; oper full; }
		secure          { everyone limited; self full; oper full; }
		bot             { everyone full; }
		services        { everyone full; }
		reputation      { everyone none;    self none; oper full; }
		geo             { everyone none;    self none; oper full; }
		certfp          { everyone full; }
		shunned         { everyone none;    self none; oper full; }
		account         { everyone full; }
		swhois          { everyone full; }
		idle            { everyone limited; self full; oper full; }
	}
}

hideserver {
	disable-map yes;
	disable-links yes;
	map-deny-message "8,4   E N T E R   T H E   V O I D   ";
	links-deny-message "8,4   E N T E R   T H E   V O I D   ";
}

security-group known-users {
	identified yes;
	reputation-score 25;
}