agentbbs/deploy
Anthony Ettinger 25266845e0 irc: enforce per-member SASL passwords + irssi setup on landing page
Auth model change: ergo-auth-member now verifies the SASL passphrase against a
per-member pbkdf2 hash (/var/lib/ergo/irc-passwd) in addition to BBS membership,
replacing the old "membership is the credential, passphrase ignored" gate that
let anyone who knew a member name connect as them. Rewrote deploy/ergo/auth-script.sh
in python3 (drops jq/curl dep); setup.sh already installs it as ergo-auth-member.

- scripts/set-irc-password.sh: set/rotate a member's IRC password (or --all to
  backfill); also syncs The Lounge saslPassword so the web client keeps working.
- setup.sh landing page: new "IRC from a desktop client" section with irssi/HexChat/
  WeeChat SASL setup (connect by network name ProfullstackBBS, not hostname).
- docs/irc.md: document password auth, the helper, the 6697 cloud-firewall note,
  and an irssi quick-start.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-23 14:11:29 +00:00
..
ergo irc: enforce per-member SASL passwords + irssi setup on landing page 2026-06-23 14:11:29 +00:00
mailu Feat/mail all members (#55) 2026-06-23 03:38:31 -07:00
news-refresh-certs.sh feat: members-only Usenet (NNTP) + Forgejo git provisioning + founding-lifetime $99 2026-06-14 14:26:23 +00:00