This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Last revision Both sides next revision | ||
openbsd:irc:znc [2020/03/19 12:16] jrmu |
openbsd:irc:znc [2020/07/21 05:13] jrmu old revision restored (2020/07/16 05:40) |
||
---|---|---|---|
Line 18: | Line 18: | ||
Shell: /sbin/nologin | Shell: /sbin/nologin | ||
OK? (y/n) [y]: y | OK? (y/n) [y]: y | ||
+ | </code> | ||
I am not sure if this is necessary, but in /etc/login.conf, I add the following: | I am not sure if this is necessary, but in /etc/login.conf, I add the following: | ||
Line 39: | Line 40: | ||
</code> | </code> | ||
- | There should be a line with znc that looks like this (I check to make sure znc has the right login class): | + | There should be a line with znc that looks like this (I check to make sure znc has the right login class; the '1001' is the uid, which you may find to be different from this example, but it should not be changed): |
<code> | <code> | ||
- | znc:*:1001:1001::0:0:znc:/home/znc:/bin/sh | + | znc:*:1001:1001:znc:0:0:znc:/home/znc:/sbin/nologin |
</code> | </code> | ||
Line 48: | Line 49: | ||
<code> | <code> | ||
- | cap_mkdb /etc/login.conf | + | $ doas cap_mkdb /etc/login.conf |
</code> | </code> | ||
+ | |||
+ | Now change znc shell to /bin/ksh , then continue with the steps below. | ||
<code> | <code> | ||
Line 65: | Line 68: | ||
</code> | </code> | ||
- | I then set the default shell to /sbin/nologin: | + | |
+ | I then set the default shell to /sbin/nologin (note: the '1001' is the uid, which you may find to be different from this example, but it should not be changed.): | ||
<code> | <code> | ||
Line 75: | Line 79: | ||
</code> | </code> | ||
- | Run this install script (tested for OpenBSD 6.6 and znc-1.7.4) as root to put znc inside the chroot at /home/znc: | + | Run this install script (tested for OpenBSD 6.7 and znc-1.7.5) as root to put znc inside the chroot at /home/znc: |
<code> | <code> | ||
Line 87: | Line 91: | ||
mknod -m 644 /home/znc/dev/urandom c 45 2 | mknod -m 644 /home/znc/dev/urandom c 45 2 | ||
mknod -m 666 /home/znc/dev/null c 2 2 | mknod -m 666 /home/znc/dev/null c 2 2 | ||
- | cp /usr/lib/libc++.so.3.0 /home/znc/usr/lib/libc++.so.3.0 | + | cp /usr/lib/libc++.so.4.0 /home/znc/usr/lib/libc++.so.4.0 |
- | cp /usr/lib/libc++abi.so.1.0 /home/znc/usr/lib/libc++abi.so.1.0 | + | cp /usr/lib/libc++abi.so.2.1 /home/znc/usr/lib/libc++abi.so.2.1 |
- | cp /usr/lib/libc.so.95.1 /home/znc/usr/lib/libc.so.95.1 | + | cp /usr/lib/libc.so.96.0 /home/znc/usr/lib/libc.so.96.0 |
- | cp /usr/lib/libcrypto.so.45.5 /home/znc/usr/lib/libcrypto.so.45.5 | + | cp /usr/lib/libcrypto.so.46.1 /home/znc/usr/lib/libcrypto.so.46.1 |
cp /usr/lib/libm.so.10.1 /home/znc/usr/lib/libm.so.10.1 | cp /usr/lib/libm.so.10.1 /home/znc/usr/lib/libm.so.10.1 | ||
cp /usr/lib/libpthread.so.26.1 /home/znc/usr/lib/libpthread.so.26.1 | cp /usr/lib/libpthread.so.26.1 /home/znc/usr/lib/libpthread.so.26.1 | ||
- | cp /usr/lib/libssl.so.47.6 /home/znc/usr/lib/libssl.so.47.6 | + | cp /usr/lib/libssl.so.48.1 /home/znc/usr/lib/libssl.so.48.1 |
cp /usr/lib/libz.so.5.0 /home/znc/usr/lib/libz.so.5.0 | cp /usr/lib/libz.so.5.0 /home/znc/usr/lib/libz.so.5.0 | ||
cp /usr/libexec/ld.so /home/znc/usr/libexec/ld.so | cp /usr/libexec/ld.so /home/znc/usr/libexec/ld.so | ||
Line 107: | Line 111: | ||
<code> | <code> | ||
- | # HOME=/home/znc/ | + | # export HOME=/home/znc/ |
# chroot -u znc -g znc /home/znc znc --makeconf | # chroot -u znc -g znc /home/znc znc --makeconf | ||
</code> | </code> | ||
Line 178: | Line 182: | ||
<code> | <code> | ||
- | AnonIPLimit = 200 | + | AnonIPLimit = 10000 |
AuthOnlyViaModule = false | AuthOnlyViaModule = false | ||
ConfigWriteDelay = 0 | ConfigWriteDelay = 0 | ||
Line 195: | Line 199: | ||
SSLKeyFile = /home/znc/.znc/my.example.com.key | SSLKeyFile = /home/znc/.znc/my.example.com.key | ||
ServerThrottle = 30 | ServerThrottle = 30 | ||
- | Version = 1.7.4 | + | Version = 1.7.5 |
<Listener listener0> | <Listener listener0> | ||
Line 242: | Line 246: | ||
<Listener listener4> | <Listener listener4> | ||
+ | AllowIRC = true | ||
+ | AllowWeb = false | ||
+ | Host = 127.0.0.1 | ||
+ | IPv4 = true | ||
+ | IPv6 = false | ||
+ | Port = 1337 | ||
+ | SSL = false | ||
+ | URIPrefix = / | ||
+ | </Listener> | ||
+ | |||
+ | <Listener listener5> | ||
AllowIRC = false | AllowIRC = false | ||
AllowWeb = true | AllowWeb = true |