IRC Update for KiwiIRC 1.7

roles/IRC/templates/inspircd/inspircd.conf.j2

@@ -81,6 +81,35 @@
     tlsv13="yes">
 <openssl onrehash="yes">
 
+# Websockets
+<connect
+   name="websockets"
+   parent="main"
+   allow="*"
+   port="7778">
+<bind address=""
+   port="7778"
+   hook="websocket"
+   proxyranges="{{ main_subnet }}/{{ netmask }}"
+   nativeping="yes"
+   defaultmode="text"
+   sslprofile="websockets">
+<sslprofile
+    name="websockets"
+    provider="openssl"
+    cafile="/etc/letsencrypt/live/{{ ssl['identity'] }}/chain.pem"
+    certfile="/etc/letsencrypt/live/{{ ssl['identity'] }}/fullchain.pem"
+    keyfile="/etc/letsencrypt/live/{{ ssl['identity'] }}/privkey.pem"
+    ciphers="{{ ssl['ciphersuite'] }}"
+    hash="sha256"
+    renegotiation="no"
+    requestclientcert="no"
+    sslv3="no"
+    tlsv1="no"
+    tlsv11="no"
+    tlsv12="yes"
+    tlsv13="yes">
+
 
 
 # Performance
@@ -91,6 +120,8 @@
     softlimit="1024"
     quietbursts="yes">
 <log method="file" type="* -USERINPUT -USEROUTPUT" level="default" target="/var/log/inspircd/inspircd.log" flush="1">
+# If things aren't working as intended, flip the commenting of the lines above and below here. Make sure to remove /tmp/ircd.log afterwards.
+#<log method="file" type="* -USERINPUT -USEROUTPUT" level="debug" target="/tmp/ircd.log" flush="5">
 <pid file="/var/lib/inspircd/inspircd.pid">
 <options
 

roles/IRC/templates/inspircd/modules.conf.j2

@@ -8,6 +8,8 @@
 # SHA256 module: Allows other modules to generate SHA256 hashes,
 # usually for cryptographic uses and security.
 <module name="m_sha256.so">
+# SHA1 module
+<module name="m_sha1.so">
 
 #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
 # Abbreviation module: Provides the ability to abbreviate commands a-la
@@ -414,3 +416,8 @@
 # operators to prevent channels matching a glob from being created.
 
 <module name="cban">
+
+#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
+# Websocket module: allow websocket clients to connect
+<module name="websocket">
+<wsorigin allow="https://irc.{{ external_domain }}">

roles/IRC/templates/inspircd/opers.conf.j2

@@ -8,5 +8,5 @@
 
 # Operators are tracked in the vault.
 {% for oper in secrets['IRC']['opers'] %}
-<oper name="{{ oper }}" password="{{ secrets['IRC']['opers'][oper] }}" hash="sha256" host="*@127.0.0.1 *@10.0.1.* *@localhost *@aninix.net" type="NetAdmin" maxchans="60">
+<oper name="{{ oper }}" password="{{ secrets['IRC']['opers'][oper] }}" hash="sha256" host="*@127.0.0.1 *@10.0.1.* *@localhost *@{{ external_domain }}" type="NetAdmin" maxchans="60">
 {% endfor %}