From a6293d5bbc3d0a58ee787835635ca54d0dac0a41 Mon Sep 17 00:00:00 2001 From: reverse Date: Sun, 16 Aug 2026 19:52:27 +0000 Subject: [PATCH] docs: document cloak_method and the account/fingerprint/static cloak keys --- echoircd.conf.example | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/echoircd.conf.example b/echoircd.conf.example index 2eb9283..f8a2adc 100644 --- a/echoircd.conf.example +++ b/echoircd.conf.example @@ -47,6 +47,19 @@ oper = admin CHANGE_THIS_PASSWORD # Changing it re-cloaks everyone. cloak_key = CHANGE_THIS_TO_A_LONG_RANDOM_HEX_STRING +# cloak_method — how +x cloaks are built. Repeatable/ordered: the first method +# that applies to a user wins. Default (unset) = hmac-sha256. Methods: +# hmac-sha256 keyed, subnet-preserving host hash (the default) +# account logged-in users show / +# fingerprint TLS clients show / +# static everyone shows the fixed cloak_static_host +# e.g. account cloak for logged-in users, host hash for everyone else: +# cloak_method = account +# cloak_method = hmac-sha256 +# cloak_account_prefix = account # default: account +# cloak_cert_prefix = cert # default: cert +# cloak_static_host = users.example.net + # reverse-DNS clients on connect (the "*** Looking up your hostname..." notices). # on (default) performs the lookup and reports the result; off skips it (bare IP). resolve_hosts = on