banned/.gitignore
skizzerz 9190a4c859 Rework TLS validation a bit and support SASL EXTERNAL
- Move the config comments to botconfig.py.example where they will be more useful,
  and move the bits in settings.py near the other IRC-related settings.
- Removed support for hash types that aren't SHA-256 as we perform all the hashing on
  our end (doesn't matter what the server does or does not support), and this greatly
  simplifies the code while leaving things secure enough.
- Hardcode a default cipher suite according to mozilla modern standards, as the
  builtin ciphersuite in python may be less secure for older python versions.
- Add support for EXTERNAL auth in SASL, if a client certificate is provided. If this
  fails, it will fall back to PLAIN auth (to account for the case where a cert is added
  to the bot, but has not yet been added to NickServ, so that the bot can connect and add
  it to NickServ via !fsend)
- Redact passwords from console/log output so that asking people to pastebin their
  --verbose output when reporting issues in #lykos is less fraught with peril.
2018-01-10 12:09:10 -07:00

29 lines
277 B
Plaintext

# Backup files
*~
\#*#
.*.s[a-w][a-p]
.s[a-w][a-p]
# Python compiled files
__pycache__/
*.py[co]
# Linter files
.mypy_cache/
# Config files
botconfig.py
/gamemodes.py
/messages.json
/roles/*.py
# Database files
*.sqlite3
*.bak
# Log files
*.log
# Certificates/keys
*.pem