/* This is an example configuration for Services.

 *

 * All statements end in semi-colons (';').

 * Shell style, C style, and C++ style comments may be used.

 *

 * Items marked with "(*)" are reconfigurable at runtime via REHASH.

 */

/******************************************************************************

 * MODULES SECTION.                                                           *

 ******************************************************************************/

/*

 * These are the modules included with the core distribution of Services.

 *

 * You may be interested in the atheme community modules distribution as

 * well, which adds additional features that may or may not be compatible

 * with the project paradigms intended for maintainance of the core of

 * atheme-services.

 *

 * Visit the atheme-services website for more information and to download them.

 *

 * Modules marked [experimental] will taint your atheme-services instance. Do

 * not file any bug reports with us about using Services with those modules;

 * they will be ignored.

 */

/* Dynamic security modules.

 *

 * WARNING: If you select one of these modules, the default security policy included

 * with Atheme may break.  These modules are intended for people who know what they

 * are doing and understand the implications of what they do.  Security modules which

 * are likely to break the default policy are prefixed with [!], if you are new to

 * Atheme, you should avoid enabling them.

 *

 * If you find your security policy is broken, you may debug it while allowing normal

 * operation of your IRC network by putting Atheme into "permissive mode".  To do this,

 * enable general::permissive_mode.

 *

 * [!] Infer "command:" namespace permissions   modules/security/cmdperm

 */

#loadmodule "modules/security/cmdperm";

/* Protocol module.

 *

 * Please select a protocol module. Different servers use different protocols.

 * Below is a listing of ircd's known to work with the various protocol modules

 * available.

 *

 * Asuka 1.2.1 or later                         modules/protocol/asuka

 * Bahamut 2.1.x                                modules/protocol/bahamut

 * Charybdis IRCd                               modules/protocol/charybdis

 * ChatIRCd                                     modules/protocol/chatircd1.1

 * DreamForge 4.6.7 or later                    modules/protocol/dreamforge

 * InspIRCd 2.0                                 modules/protocol/inspircd

 * ircd-ratbox 2.0 and later                    modules/protocol/ratbox

 * IRCNet ircd (ircd 2.11)                      modules/protocol/ircnet

 * ircd-seven                                   modules/protocol/ircd-seven

 * Nefarious IRCu 0.4.0 or later                modules/protocol/nefarious

 * ngIRCd 19 or later [experimental]            modules/protocol/ngircd

 * UnrealIRCd 3.2.*                             modules/protocol/unreal

 * UnrealIRCd 4 or later                        modules/protocol/unreal4

 *

 * If your IRCd vendor has supplied a module file, build it and load it here

 * instead of one above.

 */

loadmodule "modules/protocol/ngircd";

/* Protocol mixins.

 *

 * These should be used if you do not have/want certain features on your

 * network that your ircd normally has. If you do not know what this means,

 * you do not need any of them.

 *

 * Disable halfops                              modules/protocol/mixin_nohalfops

 * Disable holdnick (use enforcer clients)      modules/protocol/mixin_noholdnick

 * Disable "protect" mode on channels           modules/protocol/mixin_noprotect

 * Disable "owner" mode on channels             modules/protocol/mixin_noowner

 */

#loadmodule "modules/protocol/mixin_nohalfops";

#loadmodule "modules/protocol/mixin_noholdnick";

#loadmodule "modules/protocol/mixin_noprotect";

#loadmodule "modules/protocol/mixin_noowner";

/* Database backend module.

 *

 * Please select a database backend module. Different backends allow for

 * different ways in which the services data can be manipulated. YOU MAY

 * ONLY HAVE ONE OF THESE BACKENDS LOADED.

 *

 * The following backends are available:

 *

 * Atheme 0.1 flatfile database format          modules/backend/flatfile

 * Open Services Exchange database format       modules/backend/opensex

 *

 * Most networks will want opensex.

 */

loadmodule "modules/backend/opensex";

/* Password hashing modules.

 *

 * If you would like encryption for your services passwords, or to migrate

 * from another IRC services package which used encryption for its passwords,

 * please select a module here.

 *

 * The following encryption-capable crypto modules are available:

 *

 *   Argon2 (Password Hashing Competition 2015)    modules/crypto/argon2

 *   scrypt (Tarsnap Online Backup Service)        modules/crypto/scrypt

 *   PBKDF2 (Including support for SASL SCRAM-SHA) modules/crypto/pbkdf2v2

 *   bcrypt (EksBlowfish; from Niels Provos etc.)  modules/crypto/bcrypt

 *   SHA2-512 crypt(3) a la '$6$...'               modules/crypto/crypt3-sha2-512

 *   SHA2-256 crypt(3) a la '$5$...'               modules/crypto/crypt3-sha2-256

 *

 * If you do not load an encryption-capable crypto module, some features will

 * not work correctly, and errors will be logged on e.g. user registration

 * that it was not possible to encrypt their password. Support for running

 * without an encryption-capable crypto module will be removed in a later

 * version of this software; for now it is just *HIGHLY* discouraged.

 *

 * Note, that upon starting with an encryption-capable crypto module, YOUR

 * UNENCRYPTED PASSWORDS ARE IMMEDIATELY AND *IRREVERSIBLY* CONVERTED. Make

 * at least TWO backups of your database before experimenting with this. If

 * you have several thousand accounts, this conversion may take a long time.

 *

 * The following modules can only be used to /verify/ existing encrypted

 * passwords, for example when upgrading from an older version of this

 * software, or migrating from something else:

 *

 *   PBKDF2 v1 (Atheme <= 7.2 compatibility)       modules/crypto/pbkdf2

 *   Raw SHA2-512                                  modules/crypto/rawsha2-512

 *   Raw SHA2-256                                  modules/crypto/rawsha2-256

 *   Anope SHA2-256 (Anope 2.0 compatibility)      modules/crypto/anope-enc-sha256

 *   Raw SHA1 (Anope ~1.8 compatibility)           modules/crypto/rawsha1

 *   Raw MD5 (Anope ~1.8 compatibility)            modules/crypto/rawmd5

 *   IRCServices (+ Anope) compatibility           modules/crypto/ircservices

 *   MD5 crypt(3) (Atheme Linux compatibility)     modules/crypto/crypt3-md5

 *   DES crypt(3) (Atheme OS X compatibility)      modules/crypto/crypt3-des

 *   Base64 (Anope ~1.8 compatibility)             modules/crypto/base64

 *

 * To transition between crypto schemes, load the preferred scheme first,

 * and as users login or set new passwords, they will be migrated to the new

 * preferred scheme. Like so:

 *

 * loadmodule "modules/crypto/argon2";

 * loadmodule "modules/crypto/scrypt";

 * loadmodule "modules/crypto/pbkdf2v2";

 * loadmodule "modules/crypto/pbkdf2";

 * loadmodule "modules/crypto/crypt3-md5";

 *

 * The Argon2 module requires the argon2 reference library (./configure

 * --with-argon2) and is *NOT* available in Atheme v7.2 or earlier. If you

 * wish to use this module while retaining the possibility to downgrade to

 * v7.2, please see the crypto {} documentation below.

 *

 * The Scrypt module requires libsodium (./configure --with-libsodium) and is

 * *NOT* available in Atheme v7.2 or earlier. This module may also require a

 * 64-bit Operating System to function correctly.

 *

 * The PBKDF2v2 module has no dependencies and is recommended. If you were

 * previously using the PBKDF2 v1 module on v7.2, you must still keep it in

 * the configuration here; the PBKDF2 v2 module cannot verify its password

 * hashes. However, you should also load PBKDF2 v2 (if you don't decide to use

 * anything else), because the PBKDF2 v1 module is now verify-only.

 *

 * The bcrypt module will truncate passwords greater than 72 characters. It is

 * also capable of verifying the older $2a$ digests that contain an integer

 * wrap-around bug, as used on e.g. Anope. It is not capable of verifying the

 * PHP-bcrypt $2x$ and $2y$ digests; but $2y$ can simply be changed to $2b$.

 * All successfully-verified passwords not using $2b$ will be converted to it.

 * This is an encryption-capable module, but its use is discouraged unless you

 * need to use it for interoperability with some other piece of software.

 *

 * The crypt3-* modules depend on your platform crypt(3) supporting the

 * respective algorithms. This is not guaranteed to be the case. If you used

 * modules/crypto/posix on Linux, you need crypt3-md5. If you used

 * modules/crypto/posix on OS X, you need crypt3-des. These modules issue

 * informational messages when loaded to the effect that they might break in

 * the future. They also run selftests on load to verify that they will work.

 *

 * All available modules are listed below, in the preferred load order. The

 * modules that are commented out are not available by default (please see

 * the v7.3 release notes in NEWS.md) or may require a third-party library to

 * use. If you know that you do not need a specific module, it is better to

 * not load it, so comment it out. Do not change the order of the modules

 * below unless you need to migrate from one to the other (as described

 * above); in particular, putting verify-only modules above encryption-

 * capable modules would be a waste of CPU time every time password

 * verification for a user whose password was not encrypted by them is

 * attempted.

 *

 * Comments that start with -- describe the ./configure option necessary to

 * have this module built.

 */

#loadmodule "modules/crypto/argon2";            /* --with-argon2 */

#loadmodule "modules/crypto/scrypt";            /* --with-sodium */

loadmodule "modules/crypto/pbkdf2v2";

#loadmodule "modules/crypto/bcrypt";            /* See notes above */

loadmodule "modules/crypto/pbkdf2";             /* Verify-only, see prev. */

#loadmodule "modules/crypto/crypt3-sha2-512";   /* Needs crypt(3) support */

#loadmodule "modules/crypto/crypt3-sha2-256";   /* Needs crypt(3) support */

#loadmodule "modules/crypto/crypt3-md5";        /* --enable-legacy-pwcrypto */

#loadmodule "modules/crypto/rawsha2-512";       /* --enable-legacy-pwcrypto */

#loadmodule "modules/crypto/rawsha2-256";       /* --enable-legacy-pwcrypto */

#loadmodule "modules/crypto/anope-enc-sha256";  /* --enable-legacy-pwcrypto */

#loadmodule "modules/crypto/rawsha1";           /* --enable-legacy-pwcrypto */

#loadmodule "modules/crypto/rawmd5";            /* --enable-legacy-pwcrypto */

#loadmodule "modules/crypto/ircservices";       /* --enable-legacy-pwcrypto */

#loadmodule "modules/crypto/crypt3-des";        /* --enable-legacy-pwcrypto */

#loadmodule "modules/crypto/base64";            /* --enable-legacy-pwcrypto */

/* Authentication module.

 *

 * These allow using passwords from an external system. The password given

 * when registering a new account is also checked against the external

 * system.

 *

 * The following authentication modules are available:

 *

 * LDAP                                         modules/auth/ldap

 *

 * The LDAP module requires OpenLDAP client libraries. It uses them in a

 * synchronous manner, which means that an unresponsive LDAP server can

 * freeze services.

 */

#loadmodule "modules/auth/ldap";

/* NickServ modules.

 *

 * Here you can disable or enable certain features of NickServ, by

 * defining which modules are loaded. You can even disable NickServ

 * entirely. Please note however, that an authentication service

 * (either NickServ, or UserServ) is required for proper functionality.

 *

 * Core components                              modules/nickserv/main

 * Nickname access lists                        modules/nickserv/access

 * Bad email address blocking                   modules/nickserv/badmail

 * CertFP fingerprint managment                 modules/nickserv/cert

 * DROP command                                 modules/nickserv/drop

 * Nickname enforcement                         modules/nickserv/enforce

 * GHOST command                                modules/nickserv/ghost

 * GROUP and UNGROUP commands                   modules/nickserv/group

 * HELP command                                 modules/nickserv/help

 * Nickname expiry override (HOLD command)      modules/nickserv/hold

 * IDENTIFY command                             modules/nickserv/identify

 * INFO command                                 modules/nickserv/info

 * Last quit message in INFO                    modules/nickserv/info_lastquit

 * LIST command                                 modules/nickserv/list

 * LISTLOGINS command                           modules/nickserv/listlogins

 * LISTMAIL command                             modules/nickserv/listmail

 * LISTOWNMAIL command                          modules/nickserv/listownmail

 * LOGIN command (for no_nick_ownership)        modules/nickserv/login

 * LOGOUT command                               modules/nickserv/logout

 * MARK command                                 modules/nickserv/mark

 * Password quality validation                  modules/nickserv/pwquality

 * FREEZE command                               modules/nickserv/freeze

 * LISTCHANS command                            modules/nickserv/listchans

 * LISTGROUPS command                           modules/nickserv/listgroups

 * REGISTER command                             modules/nickserv/register

 * Bypass registration limits (REGNOLIMIT)      modules/nickserv/regnolimit

 * Password reset (RESETPASS command)           modules/nickserv/resetpass

 * RESTRICT command                             modules/nickserv/restrict

 * Password return (RETURN command)             modules/nickserv/return

 * Password retrieval (SENDPASS command)        modules/nickserv/sendpass

 * Password retrieval allowed to normal users   modules/nickserv/sendpass_user

 * Change primary nickname (SET ACCOUNTNAME)    modules/nickserv/set_accountname

 * SET EMAIL command                            modules/nickserv/set_email

 * SET EMAILMEMOS command                       modules/nickserv/set_emailmemos

 * SET ENFORCETIME command                      modules/nickserv/set_enforcetime

 * SET HIDEMAIL command                         modules/nickserv/set_hidemail

 * SET LANGUAGE command                         modules/nickserv/set_language

 * SET NEVERGROUP command                       modules/nickserv/set_nevergroup

 * SET NEVEROP command                          modules/nickserv/set_neverop

 * SET NOGREET command                          modules/nickserv/set_nogreet

 * SET NOMEMO command                           modules/nickserv/set_nomemo

 * SET NOOP command                             modules/nickserv/set_noop

 * SET NOPASSWORD command                       modules/nickserv/set_nopassword

 * SET PASSWORD command                         modules/nickserv/set_password

 * PRIVMSG instead of NOTICE (SET PRIVMSG cmd)  modules/nickserv/set_privmsg

 * Account info hiding (SET PRIVATE command)    modules/nickserv/set_private

 * SET PROPERTY command                         modules/nickserv/set_property

 * SET PUBKEY command                           modules/nickserv/set_pubkey

 * SET QUIETCHG command                         modules/nickserv/set_quietchg

 * Password retrieval uses code (SETPASS cmd)   modules/nickserv/setpass

 * STATUS command                               modules/nickserv/status

 * Nickname metadata viewer (TAXONOMY command)  modules/nickserv/taxonomy

 * VACATION command                             modules/nickserv/vacation

 * VERIFY command                               modules/nickserv/verify

 * VHOST command                                modules/nickserv/vhost

 * Delay services account registrations         modules/nickserv/waitreg

 */

loadmodule "modules/nickserv/main";

#loadmodule "modules/nickserv/access";

loadmodule "modules/nickserv/badmail";

#loadmodule "modules/nickserv/cert";

loadmodule "modules/nickserv/drop";

#loadmodule "modules/nickserv/enforce";

loadmodule "modules/nickserv/ghost";

loadmodule "modules/nickserv/group";

loadmodule "modules/nickserv/help";

loadmodule "modules/nickserv/hold";

loadmodule "modules/nickserv/identify";

loadmodule "modules/nickserv/info";

#loadmodule "modules/nickserv/info_lastquit";

loadmodule "modules/nickserv/list";

#loadmodule "modules/nickserv/listlogins";

loadmodule "modules/nickserv/listmail";

#loadmodule "modules/nickserv/listownmail";

#loadmodule "modules/nickserv/login";

loadmodule "modules/nickserv/logout";

loadmodule "modules/nickserv/mark";

#loadmodule "modules/nickserv/pwquality";

loadmodule "modules/nickserv/freeze";

loadmodule "modules/nickserv/listchans";

loadmodule "modules/nickserv/listgroups";

loadmodule "modules/nickserv/register";

loadmodule "modules/nickserv/regnolimit";

loadmodule "modules/nickserv/resetpass";

loadmodule "modules/nickserv/restrict";

loadmodule "modules/nickserv/return";

loadmodule "modules/nickserv/setpass";

#loadmodule "modules/nickserv/sendpass";

loadmodule "modules/nickserv/sendpass_user";

loadmodule "modules/nickserv/set_accountname";

loadmodule "modules/nickserv/set_email";

loadmodule "modules/nickserv/set_emailmemos";

#loadmodule "modules/nickserv/set_enforcetime";

loadmodule "modules/nickserv/set_hidemail";

loadmodule "modules/nickserv/set_language";

loadmodule "modules/nickserv/set_nevergroup";

loadmodule "modules/nickserv/set_neverop";

loadmodule "modules/nickserv/set_nogreet";

loadmodule "modules/nickserv/set_nomemo";

loadmodule "modules/nickserv/set_noop";

#loadmodule "modules/nickserv/set_nopassword";

loadmodule "modules/nickserv/set_password";

#loadmodule "modules/nickserv/set_privmsg";

#loadmodule "modules/nickserv/set_private";

loadmodule "modules/nickserv/set_property";

loadmodule "modules/nickserv/set_pubkey";

loadmodule "modules/nickserv/set_quietchg";

loadmodule "modules/nickserv/status";

loadmodule "modules/nickserv/taxonomy";

loadmodule "modules/nickserv/vacation";

loadmodule "modules/nickserv/verify";

loadmodule "modules/nickserv/vhost";

#loadmodule "modules/nickserv/waitreg";

/* ChanServ modules.

 *

 * Here you can disable or enable certain features of ChanServ, by

 * defining which modules are loaded. You can even disable ChanServ

 * entirely. Please note that ChanServ requires an authentication

 * service, either NickServ or UserServ will do.

 *

 * Core components                              modules/chanserv/main

 * ACCESS command (simplified ACL editing)      modules/chanserv/access

 * AKICK command                                modules/chanserv/akick

 * BAN/UNBAN commands                           modules/chanserv/ban

 * UNBAN self only (load ban or this not both)  modules/chanserv/unban_self

 * BANSEARCH command                            modules/chanserv/bansearch

 * CLOSE command                                modules/chanserv/close

 * CLONE command                                modules/chanserv/clone

 * CLEAR command                                modules/chanserv/clear

 * CLEAR AKICKS command                         modules/chanserv/clear_akicks

 * CLEAR BANS command                           modules/chanserv/clear_bans

 * CLEAR FLAGS command                          modules/chanserv/clear_flags

 * CLEAR USERS command                          modules/chanserv/clear_users

 * COUNT command                                modules/chanserv/count

 * DROP command                                 modules/chanserv/drop

 * Forced flags changes                         modules/chanserv/fflags

 * FLAGS command                                modules/chanserv/flags

 * Forced foundership transfers                 modules/chanserv/ftransfer

 * GETKEY command                               modules/chanserv/getkey

 * HALFOP/DEHALFOP commands                     modules/chanserv/halfop

 * HELP command                                 modules/chanserv/help

 * Channel expiry override (HOLD command)       modules/chanserv/hold

 * INFO command                                 modules/chanserv/info

 * INVITE command                               modules/chanserv/invite

 * KICK/KICKBAN commands                        modules/chanserv/kick

 * LIST command                                 modules/chanserv/list

 * MARK command                                 modules/chanserv/mark

 * Moderated channel registrations              modules/chanserv/moderate

 * OP/DEOP commands                             modules/chanserv/op

 * OWNER/DEOWNER commands                       modules/chanserv/owner

 * PROTECT/DEPROTECT commands                   modules/chanserv/protect

 * QUIET command (+q support)                   modules/chanserv/quiet

 * Channel takeover recovery (RECOVER command)  modules/chanserv/recover

 * REGISTER command                             modules/chanserv/register

 * SET EMAIL command                            modules/chanserv/set_email

 * SET ENTRYMSG command                         modules/chanserv/set_entrymsg

 * SET FANTASY command                          modules/chanserv/set_fantasy

 * SET GAMESERV command                         modules/chanserv/set_gameserv

 * SET GUARD command                            modules/chanserv/set_guard

 * SET KEEPTOPIC command                        modules/chanserv/set_keeptopic

 * SET LIMITFLAGS command                       modules/chanserv/set_limitflags

 * SET MLOCK command                            modules/chanserv/set_mlock

 * SET PREFIX command                           modules/chanserv/set_prefix

 * Channel info hiding (SET PRIVATE command)    modules/chanserv/set_private

 * SET PROPERTY command                         modules/chanserv/set_property

 * SET PUBACL command                           modules/chanserv/set_pubacl

 * SET RESTRICTED command                       modules/chanserv/set_restricted

 * SET SECURE command                           modules/chanserv/set_secure

 * SET TOPICLOCK command                        modules/chanserv/set_topiclock

 * SET URL command                              modules/chanserv/set_url

 * SET VERBOSE command                          modules/chanserv/set_verbose

 * STATUS command                               modules/chanserv/status

 * SYNC command (and automatic ACL syncing)     modules/chanserv/sync

 * Named Successor ACL flag                     modules/chanserv/successor_acl

 * Channel metadata viewer (TAXONOMY command)   modules/chanserv/taxonomy

 * TEMPLATE command                             modules/chanserv/template

 * TOPIC/TOPICAPPEND commands                   modules/chanserv/topic

 * VOICE/DEVOICE commands                       modules/chanserv/voice

 * WHY command                                  modules/chanserv/why

 * VOP/HOP/AOP/SOP commands                     modules/chanserv/xop

 *  This module provides emulation of the ircservices XOP scheme ONLY.

 *  Do not report discrepencies when using native commands to edit channel

 *  ACLs. This is intentional.

 * Flood protection                             modules/chanserv/antiflood

 *  This module should be loaded after at least chanserv/quiet if you want

 *  the autoquiet feature to work.

 */

loadmodule "modules/chanserv/main";

loadmodule "modules/chanserv/access";

loadmodule "modules/chanserv/akick";

loadmodule "modules/chanserv/ban";

#loadmodule "modules/chanserv/unban_self";

loadmodule "modules/chanserv/bansearch";

loadmodule "modules/chanserv/clone";

loadmodule "modules/chanserv/close";

loadmodule "modules/chanserv/clear";

loadmodule "modules/chanserv/clear_akicks";

loadmodule "modules/chanserv/clear_bans";

loadmodule "modules/chanserv/clear_flags";

loadmodule "modules/chanserv/clear_users";

loadmodule "modules/chanserv/count";

loadmodule "modules/chanserv/drop";

#loadmodule "modules/chanserv/fflags";

loadmodule "modules/chanserv/flags";

loadmodule "modules/chanserv/ftransfer";

loadmodule "modules/chanserv/getkey";

#loadmodule "modules/chanserv/halfop";

loadmodule "modules/chanserv/help";

loadmodule "modules/chanserv/hold";

loadmodule "modules/chanserv/info";

loadmodule "modules/chanserv/invite";

loadmodule "modules/chanserv/kick";

loadmodule "modules/chanserv/list";

loadmodule "modules/chanserv/mark";

#loadmodule "modules/chanserv/moderate";

loadmodule "modules/chanserv/op";

#loadmodule "modules/chanserv/owner";

#loadmodule "modules/chanserv/protect";

#loadmodule "modules/chanserv/quiet";

loadmodule "modules/chanserv/recover";

loadmodule "modules/chanserv/register";

loadmodule "modules/chanserv/set_email";

loadmodule "modules/chanserv/set_entrymsg";

loadmodule "modules/chanserv/set_fantasy";

#loadmodule "modules/chanserv/set_gameserv";

loadmodule "modules/chanserv/set_guard";

loadmodule "modules/chanserv/set_keeptopic";

#loadmodule "modules/chanserv/set_limitflags";

loadmodule "modules/chanserv/set_mlock";

loadmodule "modules/chanserv/set_prefix";

#loadmodule "modules/chanserv/set_private";

loadmodule "modules/chanserv/set_property";

#loadmodule "modules/chanserv/set_pubacl";

loadmodule "modules/chanserv/set_restricted";

loadmodule "modules/chanserv/set_secure";

loadmodule "modules/chanserv/set_topiclock";