From 266b725cf1f5a3a3f7e24501dafa516f0fc24fe6 Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 24 May 2020 11:37:56 -0400 Subject: [PATCH 1/7] add changelog for v2.1.0-rc1 --- CHANGELOG.md | 111 +++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 111 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4f29fbb6..436ca372 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,117 @@ # Changelog All notable changes to Oragono will be documented in this file. +## [2.1.0-rc1] - 2020-05-25 +We're pleased to be publishing the release candidate for 2.1.0 (the official release should follow in a week or so). + +Since the release of 2.0.0 in March, a number of new communities and organizations have adopted Oragono as a communications tool. This new release incorporates many improvements and fixes derived from the experiences of real-world operators and end users. Highlights include: + +* Native support for websockets contributed by [@hhirtz](https://github.com/hhirtz), eliminating the need for a separate websockets-to-IRC proxy server +* Tighter control over the relationship between account names and nicknames, eliminating the need for extbans +* Support for sending account verification emails directly from Oragono, including DKIM signatures + +Many thanks to [@ajaspers](https://github.com/ajaspers) and [@hhirtz](https://github.com/hhirtz) for contributing patches, to [@ajaspers](https://github.com/ajaspers), [@eklitzke](https://github.com/eklitzke), and [@hhirtz](https://github.com/hhirtz) for contributing code reviews, to [@ajaspers](https://github.com/ajaspers), [@bogdomania](https://github.com/bogdomania), [@clukawski](https://github.com/clukawski), Csibesz, [@csmith](https://github.com/csmith), [@eklitzke](https://github.com/eklitzke), [@nxths](https://github.com/nxths), [@hhirtz](https://github.com/hhirtz), [@jesopo](https://github.com/jesopo), [@jlnt](https://github.com/jlnt), [@jwheare](https://github.com/jwheare), [@k4bek4be](https://github.com/k4bek4be), [@kula](https://github.com/kula), [@kylef](https://github.com/kylef), [@Mitaka8](https://github.com/Mitaka8), [@petteri](https://github.com/petteri), [@PizzaLover2007](https://github.com/PizzaLover2007), [@prawnsalad](https://github.com/prawnsalad), [@RyanSquared](https://github.com/RyanSquared), savoyard, and [@xPaw](https://github.com/xPaw) for reporting issues, and to TODO: TRANSLATORS for contributing translations. + +This release includes changes to the config file format, including one breaking change: support for `server.ip-cloaking.secret-environment-variable` has been removed. (See below for instructions on how to upgrade if you were using this feature.) All other changes to the config file format are backwards compatible and do not require updating before restart. + +This release includes a database change. If you have `datastore.autoupgrade` set to `true` in your configuration, it will be automatically applied when you restart Oragono. Otherwise, you can update the database manually by running `oragono upgradedb` (see the manual for complete instructions). + +This release includes a change to the MySQL schema. This change will be applied automatically when you restart Oragono. It is fully backwards compatible (i.e., if it is necessary for you to downgrade Oragono back to 2.0.0, it will not be necessary to downgrade the schema). + +### Config Changes +* Added `websocket` attribute of individual listeners, and a new `server.websockets` section, for configuring websocket listeners. (#967, thanks [@hhirtz](https://github.com/hhirtz)!) +* The recommended default is now to enable IP cloaking. In order to facilitate this, the cloaking secret is now stored in the database, instead of the config file. If you currently have a secret stored in the config file (as `server.ip-cloaking.secret`), it will be automatically imported into the database. If you were using `secret-environment-variable` to distribute your cloaking secret, you can import it manually after restart using the new `/HOSTSERV SETCLOAKSECRET` command. (#952) +* Added `accounts.nick-reservation.force-nick-equals-account`, which ensures that logged-in clients are using their account name as their nickname. This eliminates the need for extbans and is a new recommended default. (#864) +* Added `guest-nickname-format` and `force-guest-format`, which optionally add a prefix like `Guest-` to the nicknames of unauthenticated users (#749) +* The recommended default is now to enable history storage and playback, with messages expiring after 7 days. (As with all changes in recommended config values, applying this to an existing config file requires explicitly changing the values.) (#1030) +* Added `history.retention` section for controlling new features related to history storage and deletion (#858) +* The recommended default for `accounts.multiclient.always-on` is now `opt-in` (#919) +* Added `accounts.default-user-modes`; the recommended default is now to set `+i` on all users automatically (#942, thanks [@ajaspers](https://github.com/ajaspers)!) +* Added `channels.list-delay`, allowing restrictions on channel listings as a defence against spambots (#964) +* Added `accounts.multiclient.auto-away`, allowing always-on clients to be automatically marked as away when all their sessions disconnect +* Added `accounts.throttling` as a global throttle on the creation of new accounts (#913) +* New format for `accounts.callbacks.mailto`, allowing direct email sending and DKIM signing (#921) +* Added `accounts.login-via-pass-command`, providing a new mechanism for legacy clients to authenticate to accounts by sending `PASS account:password` pre-registration (#1020) +* Added `datastore.mysql.socket-path`, allowing MySQL connections over UNIX domain sockets (#1016, thanks savoyard and [@ajaspers](https://github.com/ajaspers)!) +* Added `roleplay` section for controlling the server's roleplay features (#865) +* The recommended default for `accounts.nick-reservation.allow-custom-enforcement` is now `false` (#918) +* The recommended default is now to allow PROXY and WEBIRC lines from localhost (#989, #1011) +* Added `channels.registration.operator-only`, optionally restricting channel registrations to operators (#685) +* Added `server.output-path` for controlling where the server writes output files (#1004) +* Operator capability names prefixed with `oper:` have been normalized to remove the prefix (the old names are still respected in the config file) (#868) +* The log category names `localconnect` and `localconnect-ip` have been changed to `connect` and `connect-ip` respectively (the old names are still respected in the config file) (#940) + +### Security +* Fixed incorrect enforcement of ban/invite/exception masks under some circumstances (#983) +* STATUSMSG were being stored in history without the relevant minimum-prefix information, so they could be replayed to unprivileged users. This was fixed by not storing them at all. (#959, thanks [@prawnsalad](https://github.com/prawnsalad)!) +* Fixed invisible users not being hidden from `WHO *` queries (#991, thanks [@ajaspers](https://github.com/ajaspers)!) + +### Fixed +* Fixed incorrect rejection of `draft/multiline` messages containing blank lines (#1005, thanks [@jwheare](https://github.com/jwheare)!) +* Fixed roleplay commands, which were completely broken from v1.1.0 through v2.0.0 (#865, thanks [@petteri](https://github.com/petteri) and [@Mitaka8](https://github.com/Mitaka8)!) +* Fixed `/SAMODE` applying user mode changes to the operator instead of the target user (#866, thanks [@csmith](https://github.com/csmith)!) +* Fixed some channels not being unregistered during account unregistration (#889) +* Fixed `/NICKSERV SET` and related commands being unavailable when account registration is disabled (#922, thanks [@PizzaLover2007](https://github.com/PizzaLover2007)!) +* Fixed `TAGMSG` not being replayed correctly in history (#1044) +* Fixed `301 RPL_AWAY` not being sent in `WHOIS` responses when applicable (#850) +* `/OPER` with no password no longer disconnects the client (#951) +* Fixed failure to send extended-join responses after account unregistration (#933, thanks [@jesopo](https://github.com/jesopo)!) +* Improved validation of channel keys (#1021, thanks [@kylef](https://github.com/kylef)!) +* Fixed labeling of `421 ERR_UNKNOWNCOMMAND` responses (#994, thanks [@k4bek4be](https://github.com/k4bek4be)!) +* Fixed incorrect parsing of ident protocol responses (#1002, thanks [@justjanne](https://github.com/justjanne)!) +* Fixed redundant `/INVITE` commands not sending `443 ERR_USERONCHANNEL` (#842, thanks [@hhirtz](https://github.com/hhirtz)!) +* Fixed `/NICKSERV REGISTER` response displaying `mailto:` out of context (#985, thanks [@eklitzke](https://github.com/eklitzke)!) +* Fixed HostServ approval and rejection notices being sent from the wrong source (#805) +* Error messages for invalid TLS certificate/key pairs are now more informative (#982) +* Fixed error message when attempting to attach a plaintext session to an always-on client (#955, thanks [@bogdomania](https://github.com/bogdomania) and [@xPaw](https://github.com/xPaw)!) +* Increased the TLS handshake timeout, increasing reliability under high CPU contention (#894) +* Fixed `CHANMODES` ISUPPORT token (#408, #874, thanks [@hhirtz](https://github.com/hhirtz)!) +* Fixed edge cases in handling of the `+k` channel mode parameter (#874, thanks [@hhirtz](https://github.com/hhirtz)!) +* `account-notify` lines are now part of the labeled-response batch when applicable (#1018) +* Fixed incorrect help description of channel mode `+R` (#930, thanks [@PizzaLover2007](https://github.com/PizzaLover2007)!) +* Fixed `255 RPL_LUSERME` response to indicate that the number of federated peer servers is 0 (#846, thanks [@RyanSquared](https://github.com/RyanSquared)!) + +### Changed +* Account names are now permanent identifiers; they cannot be re-registered after unregistration, and applicable nickname protections remain in force. (#793) +* User modes of always-on clients now persist across server restarts (#819) +* Registered channels with no members remain present on the server, including their in-memory history messages when applicable (#704, thanks [@bogdomania](https://github.com/bogdomania)!) +* Updated the [setname](https://ircv3.net/specs/extensions/setname) IRCv3 capability to its ratified version (#1001) +* `/CHANSERV AMODE` now takes immediate effect (#729) +* The channel founder can now take any action that would require channel privileges without actually having the `+q` mode (#950, #998) +* Account unregistration now always disconnects the client (#1028) +* Fakelag is now temporarily disabled during the sending of a `draft/multiline` message batch (#817) +* Failed attempts to join a `+R` channel now send `477 ERR_NEEDREGGEDNICK` (#936, thanks [@PizzaLover2007](https://github.com/PizzaLover2007), [@jesopo](https://github.com/jesopo)!) +* Channels with persistent history can no longer be renamed with `/RENAME` (#827) +* The self-signed certificate generation command `oragono mkcerts` now generates a 2048-bit RSA certificate, instead of a NIST P-521 ECDSA certificate (#898) +* Cleaned up compatibility with an obsolete WEBIRC escaping convention (#869) +* The cloak secret is now stored in the database, so it can no longer be rotated by changing `server.ip-cloaking.secret`. To rotate the secret, use the new `/HOSTSERV SETCLOAKSECRET` command. (#952) + +### Added +* Added native support for websockets (#967, thanks [@hhirtz](https://github.com/hhirtz)!) +* Added support for sending verification emails directly (i.e., without a MTA/smarthost), including DKIM signing (#920, #921) +* Added `/NICKSERV LIST` and `/CHANSERV LIST`, allowing operators to list registered nicknames and channels (#974, thanks [@ajaspers](https://github.com/ajaspers)!) +* Added auto-away feature for marking always-on clients away when all their sessions are disconnected; see `accounts.multiclient.auto-away` and `/NICKSERV HELP SET` for more information (#824) +* Added `/HISTSERV PLAY`, which plays back history messages as NOTICEs from the `HistServ` service (#383, thanks [@nxths](https://github.com/nxths)!) +* Added `/HISTSERV DELETE` for deleting history messages (see the config option `history.retention.allow-individual-delete`) (#858) +* Added `/HISTSERV FORGET` for deleting all history messages associated with an account (see the config option `history.retention.enable-account-indexing`) (#858) +* Added `/HISTSERV EXPORT` for exporting all history messages associated with an account as JSON. This can be used at the user's request for regulatory compliance reasons (see the config option `history.retention.enable-account-indexing`) (#858) +* Added support for logging legacy clients into accounts via the `PASS` command, with the [account:password](https://freenode.net/kb/answer/registration#logging-in) syntax used by Freenode. To enable this feature, set `accounts.login-via-pass-command` to `true`. (#1020, thanks [@jlnt](https://github.com/jlnt)!) +* Added `/NICKSERV ERASE` as an escape hatch for operators, allowing an account to be erased and re-registered (#793) +* Added support for playing back `MODE` and `TOPIC` messages in history (#532) +* Added `conventional.yaml`, a version of the config file that provides a more traditional IRC experience. We recommend a config file based on `oragono.yaml` for production networks, and one based on `conventional.yaml` for IRCv3 conformance testing. (#918) +* Added an optional global throttle on the creation of new accounts (#913) +* Added support for restricting `/LIST` responses sent to anonymous clients (#964) +* Added support for the Plan 9 operating system and its derivatives, including testing on 9front (#1025, thanks [@clukawski](https://github.com/clukawski)!) + +### Removed +* Removed support for colored log output (#940, #939) +* Removed support for distributing the cloaking secret via environment variables (#952) + +### Internal +* `make build` now includes an abbreviated git hash in the `002 RPL_YOURHOST` and `004 RPL_MYINFO` version strings, when applicable (#1031) +* Official releases no longer contain the git hash, only the revision tag (#1031) +* Official releases are now built with `-trimpath` (#901) + ## [2.0.0] - 2020-03-08 We're pleased to announce Oragono 2.0.0, a major update with a wide range of enhancements and fixes. Highlights include: From 4387e10376a42e38b12b1d9aae6d859ff592a7e3 Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 24 May 2020 13:08:32 -0400 Subject: [PATCH 2/7] manual updates --- docs/MANUAL.md | 38 ++++++++++++++++++++++++++++++++++++-- 1 file changed, 36 insertions(+), 2 deletions(-) diff --git a/docs/MANUAL.md b/docs/MANUAL.md index 733441d8..a0f6a42f 100644 --- a/docs/MANUAL.md +++ b/docs/MANUAL.md @@ -322,7 +322,7 @@ Oragono supports two methods of storing history, an in-memory buffer with a conf Unfortunately, client support for history playback is still patchy. In descending order of support: -1. The [IRCv3 chathistory specification](https://github.com/ircv3/ircv3-specifications/pull/393/) offers the most fine-grained control over history replay. It is supported by [Kiwi IRC's unreleased master branch](https://kiwiirc.com/), and hopefully other clients soon. +1. The [IRCv3 chathistory specification](https://github.com/ircv3/ircv3-specifications/pull/393/) offers the most fine-grained control over history replay. It is supported by [Kiwi IRC](https://github.com/kiwiirc/kiwiirc), and hopefully other clients soon. 1. We emulate the [ZNC playback module](https://wiki.znc.in/Playback) for clients that support it. You may need to enable support for it explicitly in your client (see the "ZNC" section below). 1. If you are not using the multiclient functionality, but your client is set to be always-on (see the previous section for details), Oragono will remember the last time your client signed out. You can then set your account to replay only messages you missed with `/msg NickServ set autoreplay-missed on`. Unfortunately, this feature will only work reliably if you are *not* using the multiclient functionality described in the above section --- you must be connecting with at most one client at a time. 1. You can manually request history using `/history #channel 1h` (the parameter is either a message count or a time duration). (Depending on your client, you may need to use `/QUOTE history` instead.) @@ -335,7 +335,7 @@ Unlike many other chat and web platforms, IRC traditionally exposes the user's I IP cloaking is a way of balancing these concerns about abuse with concerns about user privacy. With cloaking, the user's IP address is deterministically "scrambled", typically via a cryptographic [MAC](https://en.wikipedia.org/wiki/Message_authentication_code), to form a "cloaked" hostname that replaces the usual reverse-DNS-based hostname. Users cannot reverse the scrambling to learn each other's IPs, but can ban a scrambled address the same way they would ban a regular hostname. -Oragono supports cloaking, which can be enabled via the `server.ip-cloaking` section of the config. However, Oragono's cloaking behavior differs from other IRC software. Rather than scrambling each of the 4 bytes of the IPv4 address (or each 2-byte pair of the 8 such pairs of the IPv6 address) separately, the server administrator configures a CIDR length (essentially, a fixed number of most-significant-bits of the address). The CIDR (i.e., only the most significant portion of the address) is then scrambled atomically to produce the cloaked hostname. This errs on the side of user privacy, since knowing the cloaked hostname for one CIDR tells you nothing about the cloaked hostnames of other CIDRs --- the scheme reveals only whether two users are coming from the same CIDR. We suggest using 32-bit CIDRs for IPv4 (i.e., the whole address) and 64-bit CIDRs for IPv6, since these are the typical assignments made by ISPs to individual customers. +Oragono supports cloaking, which is enabled by default (via the `server.ip-cloaking` section of the config). However, Oragono's cloaking behavior differs from other IRC software. Rather than scrambling each of the 4 bytes of the IPv4 address (or each 2-byte pair of the 8 such pairs of the IPv6 address) separately, the server administrator configures a CIDR length (essentially, a fixed number of most-significant-bits of the address). The CIDR (i.e., only the most significant portion of the address) is then scrambled atomically to produce the cloaked hostname. This errs on the side of user privacy, since knowing the cloaked hostname for one CIDR tells you nothing about the cloaked hostnames of other CIDRs --- the scheme reveals only whether two users are coming from the same CIDR. We suggest using 32-bit CIDRs for IPv4 (i.e., the whole address) and 64-bit CIDRs for IPv6, since these are the typical assignments made by ISPs to individual customers. Setting `server.ip-cloaking.num-bits` to 0 gives users cloaks that don't depend on their IP address information at all, which is an option for deployments where privacy is a more pressing concern than abuse. Holders of registered accounts can also use the vhost system (for details, `/msg HostServ HELP`.) @@ -687,6 +687,40 @@ One exception is services frameworks like [Anope](https://github.com/anope/anope If you're looking for a bot that supports modern IRCv3 features, check out [bitbot](https://github.com/jesopo/bitbot/)! +## Kiwi + +[Kiwi IRC](https://github.com/kiwiirc/kiwiirc/) is a web-based IRC client at the bleeding edge of IRCv3 support. In particular, it is the only major client to support fully Oragono's server-side history features. For a demonstration of these features, see the [Oragono testnet](https://testnet.oragono.io/kiwi). + +Current versions of Kiwi are 100% static files (HTML and Javascript), running entirely in the end user's browser without the need for a separate server-side backend. This frontend can connect directly to Oragono, using Oragono's support for native websockets. For best interoperability with firewalls, you should run an externally facing web server on port 443 that can serve both the static files and the websocket path, then have it reverse-proxy the websocket path to Oragono. For example, configure the following listener in ircd.yaml: + +```yaml + "127.0.0.1:8067": + websocket: true +``` + +then the following location block in your nginx config (this proxies only `/webirc` on your server to Oragono's websocket listener): + +``` + location /webirc { + proxy_pass http://127.0.0.1:8067; + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "Upgrade"; + proxy_set_header X-Forwarded-For $remote_addr; + proxy_set_header X-Forwarded-Proto $scheme; + } +``` + +then add the following `startupOptions` to Kiwi's `static/config.json` file (see the [Oragono testnet's config.json](https://testnet.oragono.io/kiwi/static/config.json) for a fully functional example): + +``` + "startupOptions" : { + "websocket": "wss://domain.example.com/webirc", + "channel": "#chat", + "nick": "kiwi-n?" + }, +``` + ## Hybrid Open Proxy Monitor (HOPM) [hopm](https://github.com/ircd-hybrid/hopm) can be used to monitor your server for connections from open proxies, then automatically ban them. To configure hopm to work with oragono, add operator blocks like this to your oragono config file, which grant hopm the necessary privileges: From 0f19883d9c9ed317b7257a5bb4e7cb235a8bb3ab Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 24 May 2020 13:23:06 -0400 Subject: [PATCH 3/7] operator guide --- docs/MANUAL.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/docs/MANUAL.md b/docs/MANUAL.md index a0f6a42f..d50c9057 100644 --- a/docs/MANUAL.md +++ b/docs/MANUAL.md @@ -22,6 +22,8 @@ _Copyright © Daniel Oaks , Shivaram Lingamneni Date: Sun, 24 May 2020 17:45:09 -0400 Subject: [PATCH 4/7] fix systemd unit --- distrib/systemd/oragono.service | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/distrib/systemd/oragono.service b/distrib/systemd/oragono.service index 6af6ad6f..efdb761f 100644 --- a/distrib/systemd/oragono.service +++ b/distrib/systemd/oragono.service @@ -2,8 +2,9 @@ Description=oragono After=network.target # If you are using MySQL for history storage, comment out the above line -# and uncomment these two instead: -# Requires=mysql.service +# and uncomment these two instead (you must independently install and configure +# MySQL for your system): +# Wants=mysql.service # After=network.target mysql.service [Service] From 5c4425ec543adbbadb4b02b8b98dd4b54c9124ac Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 24 May 2020 18:00:58 -0400 Subject: [PATCH 5/7] switch to nothing-up-my-sleeve example password hashes --- conventional.yaml | 4 ++-- distrib/docker/run.sh | 2 +- oragono.yaml | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/conventional.yaml b/conventional.yaml index d6d1db79..fe3e5bbb 100644 --- a/conventional.yaml +++ b/conventional.yaml @@ -152,7 +152,7 @@ server: fingerprint: "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789" # password the gateway uses to connect, made with oragono genpasswd - password: "$2a$04$sLEFDpIOyUp55e6gTMKbOeroT6tMXTjPFvA0eGvwvImVR9pkwv7ee" + password: "$2a$04$abcdef0123456789abcdef0123456789abcdef0123456789abcde" # addresses/CIDRs that can use this webirc command # you should also add these addresses to the connection limits and throttling exemption lists @@ -589,7 +589,7 @@ opers: # or by certificate fingerprint, or both. if a password hash is set, then a # password is required to oper up (e.g., /OPER dan mypassword). to generate # the hash, use `oragono genpasswd`. - password: "$2a$04$LiytCxaY0lI.guDj2pBN4eLRD5cdM2OLDwqmGAgB6M2OPirbF5Jcu" + password: "$2a$04$0123456789abcdef0123456789abcdef0123456789abcdef01234" # if a SHA-256 certificate fingerprint is configured here, then it will be # required to /OPER. if you comment out the password hash above, then you can diff --git a/distrib/docker/run.sh b/distrib/docker/run.sh index 280abab9..f049dd47 100644 --- a/distrib/docker/run.sh +++ b/distrib/docker/run.sh @@ -11,7 +11,7 @@ if [ ! -f "/ircd/ircd.yaml" ]; then OPERPASS=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c20) echo "Oper username:password is admin:$OPERPASS" ENCRYPTEDPASS=$(echo "$OPERPASS" | /ircd-bin/oragono genpasswd) - ORIGINALPASS='\$2a\$04\$LiytCxaY0lI.guDj2pBN4eLRD5cdM2OLDwqmGAgB6M2OPirbF5Jcu' + ORIGINALPASS='\$2a\$04\$0123456789abcdef0123456789abcdef0123456789abcdef01234' awk "{gsub(/password: \\\"$ORIGINALPASS\\\"/,\"password: \\\"$ENCRYPTEDPASS\\\"\")}1" /tmp/ircd.yaml > /tmp/ircd2.yaml diff --git a/oragono.yaml b/oragono.yaml index 6eacba13..36ff46cf 100644 --- a/oragono.yaml +++ b/oragono.yaml @@ -178,7 +178,7 @@ server: fingerprint: "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789" # password the gateway uses to connect, made with oragono genpasswd - password: "$2a$04$sLEFDpIOyUp55e6gTMKbOeroT6tMXTjPFvA0eGvwvImVR9pkwv7ee" + password: "$2a$04$abcdef0123456789abcdef0123456789abcdef0123456789abcde" # addresses/CIDRs that can use this webirc command # you should also add these addresses to the connection limits and throttling exemption lists @@ -615,7 +615,7 @@ opers: # or by certificate fingerprint, or both. if a password hash is set, then a # password is required to oper up (e.g., /OPER dan mypassword). to generate # the hash, use `oragono genpasswd`. - password: "$2a$04$LiytCxaY0lI.guDj2pBN4eLRD5cdM2OLDwqmGAgB6M2OPirbF5Jcu" + password: "$2a$04$0123456789abcdef0123456789abcdef0123456789abcdef01234" # if a SHA-256 certificate fingerprint is configured here, then it will be # required to /OPER. if you comment out the password hash above, then you can From 851125130d42a73140b222c7564580af35d37c13 Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 24 May 2020 20:19:19 -0400 Subject: [PATCH 6/7] more manual updates --- docs/MANUAL.md | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/docs/MANUAL.md b/docs/MANUAL.md index d50c9057..54518832 100644 --- a/docs/MANUAL.md +++ b/docs/MANUAL.md @@ -5,7 +5,7 @@ ▐█▌.▐▌▐█•█▌▐█ ▪▐▌▐█▄▪▐█▐█▌ ▐▌██▐█▌▐█▌.▐▌ ▀█▄▀▪.▀ ▀ ▀ ▀ ·▀▀▀▀ ▀█▄▀ ▀▀ █▪ ▀█▄▀▪ - Oragono IRCd Manual 2019-06-12 + Oragono IRCd Manual v2.1.0 https://oragono.io/ _Copyright © Daniel Oaks , Shivaram Lingamneni _ @@ -40,8 +40,10 @@ _Copyright © Daniel Oaks , Shivaram Lingamneni Date: Sun, 24 May 2020 20:30:06 -0400 Subject: [PATCH 7/7] add missing top-level credit --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 436ca372..99079a06 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,7 +10,7 @@ Since the release of 2.0.0 in March, a number of new communities and organizatio * Tighter control over the relationship between account names and nicknames, eliminating the need for extbans * Support for sending account verification emails directly from Oragono, including DKIM signatures -Many thanks to [@ajaspers](https://github.com/ajaspers) and [@hhirtz](https://github.com/hhirtz) for contributing patches, to [@ajaspers](https://github.com/ajaspers), [@eklitzke](https://github.com/eklitzke), and [@hhirtz](https://github.com/hhirtz) for contributing code reviews, to [@ajaspers](https://github.com/ajaspers), [@bogdomania](https://github.com/bogdomania), [@clukawski](https://github.com/clukawski), Csibesz, [@csmith](https://github.com/csmith), [@eklitzke](https://github.com/eklitzke), [@nxths](https://github.com/nxths), [@hhirtz](https://github.com/hhirtz), [@jesopo](https://github.com/jesopo), [@jlnt](https://github.com/jlnt), [@jwheare](https://github.com/jwheare), [@k4bek4be](https://github.com/k4bek4be), [@kula](https://github.com/kula), [@kylef](https://github.com/kylef), [@Mitaka8](https://github.com/Mitaka8), [@petteri](https://github.com/petteri), [@PizzaLover2007](https://github.com/PizzaLover2007), [@prawnsalad](https://github.com/prawnsalad), [@RyanSquared](https://github.com/RyanSquared), savoyard, and [@xPaw](https://github.com/xPaw) for reporting issues, and to TODO: TRANSLATORS for contributing translations. +Many thanks to [@ajaspers](https://github.com/ajaspers) and [@hhirtz](https://github.com/hhirtz) for contributing patches, to [@ajaspers](https://github.com/ajaspers), [@eklitzke](https://github.com/eklitzke), and [@hhirtz](https://github.com/hhirtz) for contributing code reviews, to [@ajaspers](https://github.com/ajaspers), [@bogdomania](https://github.com/bogdomania), [@clukawski](https://github.com/clukawski), Csibesz, [@csmith](https://github.com/csmith), [@eklitzke](https://github.com/eklitzke), [@nxths](https://github.com/nxths), [@hhirtz](https://github.com/hhirtz), [@jesopo](https://github.com/jesopo), [@jlnt](https://github.com/jlnt), [@justjanne](https://github.com/justjanne), [@jwheare](https://github.com/jwheare), [@k4bek4be](https://github.com/k4bek4be), [@kula](https://github.com/kula), [@kylef](https://github.com/kylef), [@Mitaka8](https://github.com/Mitaka8), [@petteri](https://github.com/petteri), [@PizzaLover2007](https://github.com/PizzaLover2007), [@prawnsalad](https://github.com/prawnsalad), [@RyanSquared](https://github.com/RyanSquared), savoyard, and [@xPaw](https://github.com/xPaw) for reporting issues, and to TODO: TRANSLATORS for contributing translations. This release includes changes to the config file format, including one breaking change: support for `server.ip-cloaking.secret-environment-variable` has been removed. (See below for instructions on how to upgrade if you were using this feature.) All other changes to the config file format are backwards compatible and do not require updating before restart.