3
0
mirror of https://github.com/ergochat/ergo.git synced 2024-11-26 05:49:25 +01:00

Merge pull request #801 from slingamn/plaintext_listeners

new default: no public plaintext listener
This commit is contained in:
Shivaram Lingamneni 2020-02-22 20:08:23 -08:00 committed by GitHub
commit 01144a8c39
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -12,14 +12,14 @@ server:
# addresses to listen on # addresses to listen on
listeners: listeners:
# The standard plaintext port for IRC is 6667. This will listen on all interfaces: # The standard plaintext port for IRC is 6667. Allowing plaintext over the
":6667": # public Internet poses serious security and privacy issues. Accordingly,
# we recommend using plaintext only on local (loopback) interfaces:
# Allowing plaintext over the public Internet poses security and privacy issues, "127.0.0.1:6667": # (loopback ipv4, localhost-only)
# so if possible, we recommend that you comment out the above line and replace "[::1]:6667": # (loopback ipv6, localhost-only)
# it with these two, which listen only on local interfaces: # If you need to serve plaintext on public interfaces, comment out the above
# "127.0.0.1:6667": # (loopback ipv4, localhost-only) # two lines and uncomment the line below (which listens on all interfaces):
# "[::1]:6667": # (loopback ipv6, localhost-only) # ":6667":
# Alternately, if you have a TLS certificate issued by a recognized CA, # Alternately, if you have a TLS certificate issued by a recognized CA,
# you can configure port 6667 as an STS-only listener that only serves # you can configure port 6667 as an STS-only listener that only serves
# "redirects" to the TLS port, but doesn't allow chat. See the manual # "redirects" to the TLS port, but doesn't allow chat. See the manual