agentbbs/deploy/ergo
Anthony Ettinger 25266845e0 irc: enforce per-member SASL passwords + irssi setup on landing page
Auth model change: ergo-auth-member now verifies the SASL passphrase against a
per-member pbkdf2 hash (/var/lib/ergo/irc-passwd) in addition to BBS membership,
replacing the old "membership is the credential, passphrase ignored" gate that
let anyone who knew a member name connect as them. Rewrote deploy/ergo/auth-script.sh
in python3 (drops jq/curl dep); setup.sh already installs it as ergo-auth-member.

- scripts/set-irc-password.sh: set/rotate a member's IRC password (or --all to
  backfill); also syncs The Lounge saslPassword so the web client keeps working.
- setup.sh landing page: new "IRC from a desktop client" section with irssi/HexChat/
  WeeChat SASL setup (connect by network name ProfullstackBBS, not hostname).
- docs/irc.md: document password auth, the helper, the 6697 cloud-firewall note,
  and an irssi quick-start.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-23 14:11:29 +00:00
..
auth-script.sh irc: enforce per-member SASL passwords + irssi setup on landing page 2026-06-23 14:11:29 +00:00
ircd.yaml fix(ergo): use absolute lock-file path so it lands in the writable data dir 2026-06-23 12:57:49 +00:00
refresh-certs.sh feat(irc): members-only Ergo IRC network co-located on the BBS 2026-06-14 11:26:07 +00:00