InspIRCd v4 is still early in development!
If you use this branch you may experience crashes, weird behaviour, and unannounced breaking changes.
You probably want to use InspIRCd v3 instead.
The "ircv3_sts" Module (v4)
Description
This module adds support for the IRCv3 Strict Transport Security specification.
Configuration
To load this module use the following <module>
tag:
<module name="ircv3_sts">
<connect>
This module extends the core <connect>
tags with the following fields:
Name | Type | Default Value | Description |
---|---|---|---|
usests | Boolean | Yes | Whether users in this connect class should have a STS policy advertised to them. |
Example Usage
Disables STS policy advertisement for users in the LocalIPv4 class:
<connect name="LocalIPv4"
allow="127.0.0.0/8"
...
usests="no">
<sts>
The <sts>
tag defines settings about how the sts module should behave. This tag can only be defined once.
Name | Type | Default Value | Description |
---|---|---|---|
host | Text | None | Required! A glob pattern for the hostname a user must send to use STS. |
duration | Duration | 60d | The time period that the STS policy should last for. |
port | Number | None | Required! The port that clients should connect on securely. |
preload | Boolean | No | Whether the STS policy can be included in preload lists. |
Example Usage
<sts host="*.example.com"
duration="60d"
port="6697"
preload="yes">
Client Capabilities
Name | Description |
---|---|
sts | Defines a mechanism for clients to upgrade plaintext IRC connections to TLS (SSL). |