ircd.conf

# ==========================================================================
# Cathexis IRCd — Production Configuration
# ==========================================================================
# Version: 1.2.0
#
# This is a WORKING configuration. Edit the values below to match your
# network, then copy to your ircd lib directory:
#   cp ircd.conf /home/ircd/lib/ircd.conf
#
# MINIMUM changes required before first start:
#   1. General { name, description, numeric }
#   2. Admin { Location, Contact }
#   3. Operator { name, password }
#   4. Features { HOST_HIDING_KEY1/2/3 } — generate unique random keys
#
# Generate cloaking keys:   openssl rand -hex 32
# Generate oper password:   /home/ircd/bin/umkpasswd -m sha512 <password>
#                    or:    /home/ircd/bin/umkpasswd -m bcrypt <password>
# ==========================================================================

# ---[ Server Identity ]----------------------------------------------------
General {
  name        = "irc.example.com";
  description = "Cathexis IRC Server";
  numeric     = 1;
};

# ---[ Admin Contact ]------------------------------------------------------
Admin {
  Location = "Example Network";
  Location = "Somewhere on the Internet";
  Contact  = "admin@example.com";
};

# ---[ Connection Classes ]-------------------------------------------------
# Classes define connection behavior for groups of clients/servers.

# Default class for regular users
Class {
  name        = "Users";
  pingfreq    = 1 minutes 30 seconds;
  sendq       = 160000;
  recvq       = 8000;
  maxlinks    = 0;
  maxchans    = 20;
  usermode    = "+ix";
  fakelagminimum = 2;
  fakelagfactor  = 120;
};

# Class for known/registered users (higher limits)
Class {
  name        = "Registered";
  pingfreq    = 1 minutes 30 seconds;
  sendq       = 320000;
  recvq       = 8000;
  maxlinks    = 0;
  maxchans    = 40;
  usermode    = "+ix";
  fakelagminimum = 1;
  fakelagfactor  = 180;
};

# Class for IRC operators
Class {
  name        = "Opers";
  pingfreq    = 3 minutes;
  sendq       = 640000;
  recvq       = 16000;
  maxlinks    = 0;
  maxchans    = 0;
  snomask     = "nKgDtco";
  fakelagminimum = 0;
  fakelagfactor  = 0;
};

# Class for server-to-server links
Class {
  name        = "Server";
  pingfreq    = 3 minutes;
  connectfreq = 5 minutes;
  maxlinks    = 1;
  sendq       = 9000000;
  recvq       = 0;
};

# Hub server class (allows multiple server links)
Class {
  name        = "Hub";
  pingfreq    = 3 minutes;
  connectfreq = 5 minutes;
  maxlinks    = 0;
  sendq       = 9000000;
  recvq       = 0;
};

# ---[ Client Authorization ]-----------------------------------------------
# Allow all clients by default (restrict via G-lines/Z-lines as needed)
Client {
  class    = "Users";
  ip       = "*";
  maxlinks = 3;
};

# ---[ IRC Operators ]------------------------------------------------------
# Generate password: /home/ircd/bin/umkpasswd -m sha512 <password>
#   or:              /home/ircd/bin/umkpasswd -m bcrypt <password>
# Then paste the $6$... or $2y$... hash below.
#
# Example with plaintext password "changeme" (CHANGE THIS):
Operator {
  name     = "admin";
  host     = "*@*";
  password = "$PLAIN$changeme";
  class    = "Opers";

  # --- Privileges ---
  local            = no;
  propagate        = yes;
  netadmin         = yes;
  admin            = yes;
  kill             = yes;
  gline            = yes;
  shun             = yes;
  zline            = yes;
  jupe             = yes;
  opmode           = yes;
  rehash           = yes;
  restart          = yes;
  die              = yes;
  set              = yes;
  check            = yes;
  whois_notice     = yes;
  hide_oper        = yes;
  hide_channels    = yes;
  hide_idle        = yes;
  display          = yes;
  see_opers        = yes;
  wide_gline       = yes;
  wide_shun        = yes;
  wide_zline       = yes;
  tempshun         = yes;
  remove           = yes;
  freeform         = yes;
  remote           = yes;
  remoterehash     = yes;
  force_opmode     = yes;
  force_local_opmode = yes;
  apass_opmode     = yes;
  xtraop           = yes;

  # --- WHO/Visibility (REQUIRED to see +i users) ---
  show_invis       = yes;
  show_all_invis   = yes;
  unlimit_query    = yes;
  see_chan          = yes;
  list_chan         = yes;
  chan_limit        = yes;
  whox             = yes;
};

# ---[ Listening Ports ]----------------------------------------------------
# Standard IRC client port
Port { port = 6667; };

# Additional client port
Port { port = 6668; };

# SSL/TLS client port (requires SSL build)
# Port { ssl = yes; port = 6697; };

# Server-to-server link port
Port { server = yes; port = 4400; };

# Server-to-server link port (hidden from stats)
Port { server = yes; hidden = yes; port = 4401; };

# ---[ Server Links ]------------------------------------------------------
# Uncomment and edit to link to another server.
#
# Connect {
#   name      = "hub.example.com";
#   host      = "192.168.1.100";
#   password  = "linkpassword";
#   port      = 4400;
#   class     = "Server";
#   hub       = "*";
#   autoconnect = yes;
# };

# ---[ WebIRC Gateways ]---------------------------------------------------
# Uncomment for KiwiIRC, The Lounge, or other web gateways.
#
# WebIRC {
#   host     = "*@127.0.0.1";
#   password = "$PLAIN$webircpassword";
#   description = "Web Gateway";
#   enableoptions = yes;
# };

# ---[ Juped Nicknames ]---------------------------------------------------
# Reserve service nicknames
Jupe {
  nick = "ChanServ";
  nick = "NickServ";
  nick = "MemoServ";
  nick = "OperServ";
  nick = "HelpServ";
  nick = "AuthServ";
  nick = "Global";
  nick = "BotServ";
  nick = "HostServ";
  nick = "GameServ";
  nick = "StatServ";
};

# ---[ Service Aliases ]---------------------------------------------------
# These let users type /CHANSERV instead of /MSG ChanServ
# Uncomment when services are linked.
#
# Pseudo "CHANSERV" {
#   name = "ChanServ";
#   nick = "ChanServ@services.example.com";
# };
# Pseudo "NICKSERV" {
#   name = "NickServ";
#   nick = "NickServ@services.example.com";
# };
# Pseudo "LOGIN" {
#   name = "NickServ";
#   prepend = "IDENTIFY ";
#   nick = "NickServ@services.example.com";
# };

# ---[ Quarantined Channels ]----------------------------------------------
# Channels that cannot be OPMODE'd by opers (unless forced with !)
Quarantine {
  "#services" = "Protected services channel";
};

# ---[ Features ]----------------------------------------------------------
# Runtime-toggleable features. All values shown are the defaults.
# Use /SET <feature> <value> to change at runtime (requires SET privilege).
# Use /STATS f to view all current feature values.

Features {
  # =====================================================================
  # NETWORK IDENTITY
  # =====================================================================
  "NETWORK"               = "CathexisNet";
  "DOMAINNAME"            = "example.com";
  "HIS_SERVERNAME"        = "*.example.com";
  "HIS_SERVERINFO"        = "Cathexis IRC Network";
  "HIS_URLSERVERS"        = "https://example.com";
  "URLREG"                = "https://example.com/register";
  "URL_CLIENTS"           = "https://example.com/clients";
  "PROVIDER"              = "";

  # =====================================================================
  # FILE PATHS (relative to data directory, usually $PREFIX/lib)
  # =====================================================================
  "MPATH"                 = "ircd.motd";
  "RPATH"                 = "remote.motd";
  "PPATH"                 = "ircd.pid";
  "TPATH"                 = "ircd.tune";
  "OMPATH"                = "ircd.opermotd";
  "EPATH"                 = "ircd.rules";

  # =====================================================================
  # SERVER SECURITY
  # =====================================================================
  # Password required for /DIE and /RESTART (STRONGLY recommended)
  # Generate: /home/ircd/bin/umkpasswd -m sha512 <password>
  "DIEPASS"               = "";
  "RESTARTPASS"           = "";

  # Enable OPMODE/CLEARMODE commands for opers
  "CONFIG_OPERCMDS"       = "TRUE";

  # =====================================================================
  # HOST CLOAKING
  # =====================================================================
  # REQUIRED: Change these keys! Generate with: openssl rand -hex 32
  # All servers on the network MUST use the same 3 keys.
  "HOST_HIDING"           = "TRUE";
  "HOST_HIDING_STYLE"     = "3";
  "HOST_HIDING_PREFIX"    = "DexterousNet";
  "HOST_HIDING_KEY1"      = "a5e7161b23815ccf1bcc5c9cad15f0997a41efa3efd8b49646dd7faf83aec48b";
  "HOST_HIDING_KEY2"      = "8f17f980a537a2af3415b2fc9d359e94008401b4b2d9d705235366bd79e0c508";
  "HOST_HIDING_KEY3"      = "0fe8a659cd023ec5b6682698230d9f0dae1b9f32e1dafd93099d3f92a178ff33";
  "HOST_HIDING_COMPONENTS" = "3";
  "HOST_HIDING_HMAC"      = "TRUE";

  # Weak password mechanism gates (default OFF — reject weak hashes)
  # Set to TRUE only if you have legacy passwords that haven't been upgraded
  "CRYPT_ALLOW_PLAIN"     = "FALSE";
  "CRYPT_ALLOW_SMD5"      = "FALSE";

  # =====================================================================
  # Server-to-Server Cryptographic Authentication (Cathexis 1.2.0+)
  # =====================================================================
  # When enabled, every S2S message is HMAC-SHA256 signed and verified.
  # Keys are derived from link passwords using HMAC-SHA256 as KDF.
  # Link passwords MUST be strong random strings when S2S_HMAC is TRUE:
  #   openssl rand -hex 32
  # WARNING: Breaks compatibility with non-Cathexis servers.
  "S2S_HMAC"              = "FALSE";

  # Channel state verification after BURST.
  # Servers exchange SHA-256 hashes of channel state and trigger
  # re-synchronization on mismatch.
  "S2S_CSYNC"             = "FALSE";

  # Services hub authorization.
  # When set, only the server with this numeric can send SA* commands.
  # All other servers' SA* commands are rejected and logged.
  # Leave empty to allow SA* from any server (legacy P10 behavior).
  # "SERVICES_HUB_NUMERIC" = "AB";
  # "SERVICES_KEY"         = "";
  "HIDDEN_HOST"           = "Users.CathexisNet";
  "HIDDEN_HOST_QUIT"      = "TRUE";
  "HIDDEN_HOST_SET_MESSAGE" = "Registered";
  "HIDDEN_HOST_UNSET_MESSAGE" = "UnRegistered";
  "HIDDEN_IP"             = "127.0.0.1";

  # Oper host hiding
  "OPERHOST_HIDING"       = "TRUE";
  "HIDDEN_OPERHOST"       = "Staff.CathexisNet";

  # =====================================================================
  # DNSBL (DNS Blacklist) CHECKING
  # =====================================================================
  # When enabled, every connecting client's IP is checked against the
  # configured DNSBL zones. If listed, the client is rejected or marked.
  #
  # Up to 3 DNSBL zones are queried in parallel during registration.
  # The check runs alongside DNS/ident — no extra delay for clean IPs.
  #
  # Verified active IRC-focused DNSBL zones (as of 2026):
  #
  #   dnsbl.dronebl.org     — Open proxies, botnets, compromised hosts.
  #                           Lookup: https://dronebl.org/lookup
  #                           IRC-focused. Used by Libera, OFTC, etc.
  #                           Auto-delisting when abuse stops.
  #
  #   rbl.efnetrbl.org      — Open proxies, spam clients, trojans, Tor,
  #                           drones/flooding. Maintained by EFnet.
  #                           Lookup: https://rbl.efnetrbl.org/?i=<IP>
  #                           Auto-delist: 7d proxies, 10d Tor.
  #                           Return codes: 1=proxy 2/3=spam 4=Tor 5=drone
  #
  #   torexit.dan.me.uk     — Tor EXIT nodes only. Updated every 30 min
  #                           from live Tor network. DNSSEC signed.
  #                           No query limits. Auto-delist within 1 hour
  #                           when node stops. IPv6 supported.
  #                           Lookup: https://www.dan.me.uk/torcheck
  #                           NOTE: Only use if you want to block Tor.
  #                           tor.dan.me.uk lists ALL Tor nodes (not
  #                           just exits) — use with caution.
  #
  "DNSBL"                 = "TRUE";
  "DNSBL_HOST"            = "dnsbl.dronebl.org";
  "DNSBL_HOST2"           = "rbl.efnetrbl.org";
  "DNSBL_HOST3"           = "torexit.dan.me.uk";
  "DNSBL_REJECT"          = "TRUE";
  "DNSBL_REASON"          = "Your IP is listed in a DNS blacklist. Visit https://dronebl.org/lookup or https://rbl.efnetrbl.org for removal.";
  "DNSBL_MARK"            = "DNSBL";

  # =====================================================================
  # CONNECTION & FLOOD PROTECTION
  # =====================================================================
  "AUTH_TIMEOUT"          = "9";
  "CONNECTTIMEOUT"        = "60";
  "CONNECTFREQUENCY"      = "600";
  "PINGFREQUENCY"         = "120";
  "CLIENT_FLOOD"          = "1024";

  # Clone detection: max N connections from same IP in PERIOD seconds,
  # then throttle for DELAY seconds
  "IPCHECK_CLONE_LIMIT"   = "4";
  "IPCHECK_CLONE_PERIOD"  = "40";
  "IPCHECK_CLONE_DELAY"   = "600";

  # Kill users with mismatched IP on connect
  "KILL_IPMISMATCH"       = "FALSE";

  # Target limiting (prevents mass-message spam)
  "TARGET_LIMITING"       = "TRUE";
  "NOMULTITARGETS"        = "FALSE";

  # Server link timeouts
  "HANGONGOODLINK"        = "300";
  "HANGONRETRYDELAY"      = "10";

  # =====================================================================
  # CHANNEL MODES
  # =====================================================================
  "HALFOPS"               = "TRUE";
  "OWNERPROTECT"          = "TRUE";
  "EXCEPTS"               = "TRUE";
  "LOCAL_CHANNELS"        = "TRUE";
  "OPLEVELS"              = "FALSE";
  "FLEXIBLEKEYS"          = "FALSE";
  "APASS_CANSEND"         = "FALSE";
  "TOPIC_BURST"           = "TRUE";
  "ZANNELS"               = "FALSE";
  "HALFOP_DEHALFOP_SELF"  = "FALSE";
  "CHANNEL_CREATE_IRCOPONLY" = "FALSE";
  "ANNOUNCE_INVITES"      = "FALSE";

  # Extended channel modes (+a, +c, +C, +L, +M, +N, +O, +Q, +S, +T, +Z)
  "CHMODE_a"              = "TRUE";
  "CHMODE_c"              = "TRUE";
  "CHMODE_C"              = "TRUE";
  "CHMODE_L"              = "TRUE";
  "CHMODE_M"              = "TRUE";
  "CHMODE_N"              = "TRUE";
  "CHMODE_O"              = "TRUE";
  "CHMODE_Q"              = "TRUE";
  "CHMODE_S"              = "TRUE";
  "CHMODE_T"              = "TRUE";
  "CHMODE_Z"              = "TRUE";
  "CHMODE_Z_STRICT"       = "TRUE";
  "CHMODE_e_CHMODEEXCEPTION" = "FALSE";
  "CHMODE_m_NONICKCHANGE" = "TRUE";
  "CHMODE_r_NONICKCHANGE" = "TRUE";

  # Extended bans (~a, ~c, ~j, ~n, ~q, ~r, ~m, ~M)
  "EXTBANS"               = "TRUE";
  "EXTBAN_a"              = "TRUE";
  "EXTBAN_c"              = "TRUE";
  "EXTBAN_j"              = "TRUE";
  "EXTBAN_j_MAXDEPTH"     = "1";
  "EXTBAN_j_MAXPERCHAN"   = "2";
  "EXTBAN_n"              = "TRUE";
  "EXTBAN_q"              = "TRUE";
  "EXTBAN_r"              = "TRUE";
  "EXTBAN_m"              = "TRUE";
  "EXTBAN_M"              = "TRUE";

  # =====================================================================
  # CHANNEL LIMITS
  # =====================================================================
  "MAXCHANNELSPERUSER"    = "20";
  "CHANNELLEN"            = "200";
  "TOPICLEN"              = "250";
  "MAXBANS"               = "100";
  "MAXEXCEPTS"            = "45";
  "AVBANLEN"              = "40";
  "AVEXCEPTLEN"           = "40";
  "MAX_BOUNCE"            = "5";

  # =====================================================================
  # CLIENT LIMITS
  # =====================================================================
  "NICKLEN"               = "30";
  "MAXSILES"              = "25";
  "MAXWATCHS"             = "128";
  "NICKNAMEHISTORYLENGTH" = "800";
  "LISTDELAY"             = "15";
  "NOIDENT"               = "FALSE";
  "STRICTUSERNAME"        = "FALSE";
  "IDLE_FROM_MSG"         = "TRUE";
  "KILLCHASETIMELIMIT"     = "30";

  # =====================================================================
  # BAN LIMITS (max users matched before a G/Shun/Z-line is rejected)
  # =====================================================================
  "GLINEMAXUSERCOUNT"     = "20";
  "SHUNMAXUSERCOUNT"      = "20";
  "ZLINEMAXUSERCOUNT"     = "20";
  "DISABLE_GLINES"        = "FALSE";
  "DISABLE_SHUNS"         = "FALSE";
  "DISABLE_ZLINES"        = "FALSE";

  # =====================================================================
  # SSL/TLS (uncomment if built with --with-openssl)
  # =====================================================================
  # TLS 1.2 minimum enforced by default (SSLv2, SSLv3, TLS 1.0, 1.1 disabled).
  # Cipher defaults prioritize 256-bit symmetric keys for quantum resistance.
  # When OpenSSL 3.5+ adds ML-KEM support, hybrid post-quantum key exchange
  # will activate automatically through TLS 1.3 negotiation.
  #
  # "SSL_CERTFILE"        = "ircd.pem";
  # "SSL_KEYFILE"         = "ircd.pem";
  # "SSL_CACERTFILE"      = "";
  # "SSL_VERIFYCERT"      = "TRUE";
  # "SSL_NOSELFSIGNED"    = "TRUE";
  # "SSL_NOSSLV2"         = "TRUE";
  # "SSL_NOSSLv3"         = "TRUE";
  # "SSL_NOTLSV1"         = "TRUE";
  # "SSL_NOTLSV1_1"       = "TRUE";
  # "SSL_CIPHERS"         = "ECDHE+AESGCM:ECDHE+CHACHA20:!aNULL:!eNULL:!MD5:!DSS:!RC4:!3DES:!SEED:!IDEA";
  # "SSL_CIPHERSUITES"    = "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256";
  # "SSL_REQUIRECLIENTCERT" = "FALSE";

  # =====================================================================
  # SASL
  # =====================================================================
  "SASL_SERVER"           = "*";
  "SASL_TIMEOUT"          = "8";
  "SASL_SENDHOST"         = "TRUE";
  "SASL_AUTOHIDEHOST"     = "TRUE";

  # =====================================================================
  # LOGIN ON CONNECT (for services integration)
  # =====================================================================
  "LOGIN_ON_CONNECT"      = "FALSE";
  "LOC_DEFAULT_SERVICE"   = "AuthServ";
  "LOC_TIMEOUT"           = "3";
  "LOC_SENDHOST"          = "FALSE";
  "LOC_SENDSSLFP"         = "FALSE";
  "EXTENDED_ACCOUNTS"     = "TRUE";

  # =====================================================================
  # CTCP VERSION CHECKING (anti-bot/trojan)
  # =====================================================================
  "CTCP_VERSIONING"       = "FALSE";
  "CTCP_VERSIONING_KILL"  = "FALSE";
  "CTCP_VERSIONING_CHAN"  = "FALSE";
  "CTCP_VERSIONING_CHANNAME" = "#opers";
  "CTCP_VERSIONING_USEMSG" = "FALSE";
  "CTCP_VERSIONING_NOTICE" = "*** Checking your client version";
  "CTCP_VERSIONING_NICK"  = "";

  # =====================================================================
  # GEOIP (requires --with-geoip or --with-mmdb at compile time)
  # =====================================================================
  "GEOIP_ENABLE"          = "FALSE";
  "GEOIP_FILE"            = "GeoIP.dat";
  "GEOIP_IPV6_FILE"       = "GeoIPv6.dat";
  "MMDB_FILE"             = "GeoLite2-Country.mmdb";

  # =====================================================================
  # SERVER NOTICE MASKS
  # =====================================================================
  "SNOMASK_DEFAULT"       = "nKg";
  "SNOMASK_OPERDEFAULT"   = "nKgDtco";

  # =====================================================================
  # OPER FEATURES
  # =====================================================================
  "OPER_XTRAOP"           = "FALSE";
  "OPERMOTD"              = "FALSE";
  "OPER_HIDE"             = "FALSE";
  "OPER_WHOIS_PARANOIA"   = "FALSE";
  "REMOTE_OPER"           = "FALSE";
  "SETHOST"               = "TRUE";
  "WALLOPS_OPER_ONLY"     = "FALSE";
  "RULES"                 = "FALSE";

  # =====================================================================
  # SECURITY & AUDITING
  # =====================================================================
  "CONNEXIT_NOTICES"      = "TRUE";
  "CHECK"                 = "TRUE";
  "CHECK_EXTENDED"        = "TRUE";
  "MAX_CHECK_OUTPUT"      = "1000";
  "DERESTRICT_HIDECHANS"  = "TRUE";
  "JOIN_ON_REMOVEDELAY"   = "TRUE";
  "RELIABLE_CLOCK"        = "TRUE";

  # =====================================================================
  # DNS RESOLVER
  # =====================================================================
  "NODNS"                 = "FALSE";
  "IRCD_RES_TIMEOUT"      = "4";
  "IRCD_RES_RETRIES"      = "2";

  # =====================================================================
  # PERFORMANCE TUNING
  # =====================================================================
  "BUFFERPOOL"            = "27000000";
  "DEFAULTMAXSENDQLENGTH" = "40000";
  "POLLS_PER_LOOP"        = "200";
  "HAS_FERGUSON_FLUSHER"  = "FALSE";

  # =====================================================================
  # HIS (Hide Internal Stuff — what non-opers can see)
  # =====================================================================
  "HIS_MAP"               = "TRUE";
  "HIS_SNOTICES"          = "TRUE";
  "HIS_SNOTICES_OPER_ONLY" = "TRUE";
  "HIS_DEBUG_OPER_ONLY"   = "TRUE";
  "HIS_WALLOPS"           = "TRUE";
  "HIS_LINKS"             = "TRUE";
  "HIS_TRACE"             = "TRUE";
  "HIS_STATS_a"           = "TRUE";
  "HIS_STATS_c"           = "TRUE";
  "HIS_STATS_d"           = "TRUE";
  "HIS_STATS_e"           = "TRUE";
  "HIS_STATS_f"           = "TRUE";
  "HIS_STATS_g"           = "TRUE";
  "HIS_STATS_i"           = "TRUE";
  "HIS_STATS_j"           = "TRUE";
  "HIS_STATS_J"           = "TRUE";
  "HIS_STATS_k"           = "TRUE";
  "HIS_STATS_l"           = "TRUE";
  "HIS_STATS_L"           = "TRUE";
  "HIS_STATS_M"           = "TRUE";
  "HIS_STATS_m"           = "TRUE";
  "HIS_STATS_o"           = "TRUE";
  "HIS_STATS_p"           = "TRUE";
  "HIS_STATS_q"           = "TRUE";
  "HIS_STATS_R"           = "TRUE";
  "HIS_STATS_r"           = "TRUE";
  "HIS_STATS_S"           = "TRUE";
  "HIS_STATS_t"           = "TRUE";
  "HIS_STATS_T"           = "TRUE";
  "HIS_STATS_u"           = "FALSE";
  "HIS_STATS_U"           = "TRUE";
  "HIS_STATS_v"           = "TRUE";
  "HIS_STATS_w"           = "TRUE";
  "HIS_STATS_W"           = "TRUE";
  "HIS_STATS_x"           = "TRUE";
  "HIS_STATS_y"           = "TRUE";
  "HIS_STATS_z"           = "TRUE";
  "HIS_STATS_Z"           = "TRUE";
  "HIS_STATS_E"           = "TRUE";
  "HIS_STATS_s"           = "TRUE";
  "HIS_STATS_IAUTH"       = "TRUE";
  "HIS_WHOIS_SERVERNAME"  = "TRUE";
  "HIS_WHOIS_IDLETIME"    = "TRUE";
  "HIS_WHOIS_LOCALCHAN"   = "TRUE";
  "HIS_WHO_SERVERNAME"    = "TRUE";
  "HIS_WHO_HOPCOUNT"      = "TRUE";
  "HIS_MODEWHO"           = "TRUE";
  "HIS_BANWHO"            = "TRUE";
  "HIS_KILLWHO"           = "FALSE";
  "HIS_REWRITE"           = "TRUE";
  "HIS_REMOTE"            = "TRUE";
  "HIS_NETSPLIT"          = "TRUE";
  "HIS_IRCOPS"            = "TRUE";
  "HIS_IRCOPS_SERVERS"    = "TRUE";
  "HIS_SHUN_REASON"       = "TRUE";
  "HIS_GLINE_REASON"      = "FALSE";
  "HIS_ZLINE_REASON"      = "FALSE";

  # =====================================================================
  # WHOIS LABELS
  # =====================================================================
  "WHOIS_OPER"            = "is an IRC Operator";
  "WHOIS_ADMIN"           = "is a Server Administrator";
  "WHOIS_NETADMIN"        = "is a Network Administrator";
  "WHOIS_LOCOPER"         = "is a Local IRC Operator";
  "WHOIS_SERVICE"         = "is a Network Service";

  # =====================================================================
  # IRCv3 CAPABILITIES
  # =====================================================================
  "CAP_multi_prefix"      = "TRUE";
  "CAP_userhost_in_names" = "TRUE";
  "CAP_extended_join"     = "TRUE";
  "CAP_away_notify"       = "TRUE";
  "CAP_account_notify"    = "TRUE";
  "CAP_sasl"              = "TRUE";
  "CAP_tls"               = "TRUE";
  "CAP_cap_notify"        = "TRUE";
  "CAP_server_time"       = "TRUE";
  "CAP_account_tag"       = "TRUE";
  "CAP_message_tags"      = "TRUE";
  "CAP_invite_notify"     = "TRUE";
  "CAP_chghost"           = "TRUE";
  "CAP_setname"           = "TRUE";
  "CAP_batch"             = "TRUE";
  "CAP_labeled_response"  = "TRUE";
  "CAP_standard_replies"  = "TRUE";
  "CAP_echo_message"      = "FALSE";

  # =====================================================================
  # MISC
  # =====================================================================
  "UHNAMES"               = "TRUE";
  "AUTOCHANMODES"         = "FALSE";
  "AUTOCHANMODES_LIST"    = "";
  "ALLOWRMX"              = "FALSE";
  "NETWORK_REHASH"        = "TRUE";
  "NODEFAULTMOTD"         = "TRUE";
  "MOTD_BANNER"           = "";
  "VALID_UTF8_CHANNELS_ONLY" = "TRUE";
  "HOST_IN_TOPIC"         = "TRUE";
  "SILENCE_CHANMSGS"      = "TRUE";
  "UPING_ENABLE"          = "TRUE";
  "LIST_SHOWMODES_OPERONLY" = "FALSE";
};

# ---[ MOTD ]--------------------------------------------------------------
# Create a Message of the Day file:
#   echo "Welcome to CathexisNet" > /home/ircd/lib/ircd.motd

# ---[ End of Configuration ]----------------------------------------------