gist/irc/limnoria/hardening.md
2024-06-19 08:53:27 +03:00

1.5 KiB
Raw Blame History

Hardening Limnoria

Passwordless users

This is subject to moving to the upstream documentation, see Limnoria/Limnoria-doc#91

Passwordless user accounts have been supported since version 2021-05-27. They must login by some other mechanism such as NickAuth, GPG or hostmasks.

Registering a passwordless user happens by /msg Limnoria user register <username> !, and existing user may remove their password by /msg Limnoria user set password <old password> !

Its also possible (while not recommended) to edit users.conf by hand.

  1. /msg bot flush to save all current configuration changes to disc
  2. /msg bot config flush false to disable automatic config file writing
  3. Open botdir/conf/users.conf with your favourite text editor and remove the lines beginning with password
  4. /msg bot config reload and all the accounts should be passwordless. You may also check that config flush is True, but the False shouldnt have gotten stored to disc anyway as it wasnt written to disc.