irc/limnoria/hardening.md: temporarily document passwordless accounts

This commit is contained in:
Aminda Suomalainen 2021-06-29 17:00:37 +03:00
parent 5513b15238
commit 80f72ecf23
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723

View File

@ -1 +1,23 @@
https://docs.limnoria.net/use/security.html # Hardening Limnoria
* Upstream documentation: https://docs.limnoria.net/use/security.html
## Passwordless users
*This is subject to moving to the upstream documentation, see [Limnoria/Limnoria-doc#91](https://github.com/Limnoria/Limnoria-doc/issues/91)*
Passwordless user accounts have been supported since version 2021-05-27.
They must login by some other mechanism such as NickAuth, GPG or hostmasks.
Registering a passwordless user happens by `/msg Limnoria user register <username> !`,
and existing user may remove their password by `/msg Limnoria user set password <old password> !`
It's also possible (while not recommended) to edit `users.conf` by hand.
1. `/msg bot flush` to save all current configuration changes to disc
1. `/msg bot config flush false` to disable automatic config file writing
1. Open `botdir/conf/users.conf` with your favourite text editor and remove
the lines beginning with `password`
1. `/msg bot config reload` and all the accounts should be passwordless. You
may also check that `config flush` is `True`, but the `False` shouldn't
have gotten stored to disc anyway as it wasn't written to disc.