# 安装依赖
sudo apt install -y build-essential cmake libssl-dev \
  libmysqlclient-dev libsqlite3-dev libtre-dev

# 下载 Anope
VERSION="2.1.2"
cd /tmp
wget "https://github.com/anope/anope/archive/refs/tags/${VERSION}.tar.gz"
tar xzf ${VERSION}.tar.gz
cd anope-${VERSION}

# 编译
mkdir build && cd build
cmake -DCMAKE_INSTALL_PREFIX=/opt/anope \
      -DINSTYPE=production ..
make -j$(nproc)
make install

cd /opt/anope/conf
cp example.conf services.conf
nano services.conf

/* === 服务包基本信息 === */
service
{
    nick "NickServ"
    user "services"
    host "services.example.com"
    realname "Nickname Registration Service"
}

service
{
    nick "ChanServ"
    user "services"
    host "services.example.com"
    realname "Channel Registration Service"
}

service
{
    nick "HostServ"
    user "services"
    host "services.example.com"
    realname "Virtual Host Service"
}

service
{
    nick "OperServ"
    user "services"
    host "services.example.com"
    realname "Operator Service"
}

service
{
    nick "MemoServ"
    user "services"
    host "services.example.com"
    realname "Memo Service"
}

service
{
    nick "Global"
    user "services"
    host "services.example.com"
    realname "Global Noticer"
}

/* === 连接到 IRC 服务器 === */
uplink
{
    host "127.0.0.1"
    port 6900
    ipv4 yes
    ipv6 no
    ssl yes
    password "services_link_password"
}

/* === 数据库 === */
/*
 * 使用 MySQL
 */
mysql
{
    name "anope"
    host "127.0.0.1"
    port 3306
    user "anope"
    pass "anope_db_password"
    dbname "anope"
    prefix "anope_"
}

/* 或使用 SQLite */
/*
 * sqlite
 * {
 *     name "anope"
 *     dbname "anope.db"
 *     prefix "anope_"
 * }
 */

/* === NickServ 配置 === */
module { name = "nickserv/main" }
module { name = "nickserv/register" }
module { name = "nickserv/identify" }
module { name = "nickserv/group" }
module { name = "nickserv/recover" }
module { name = "nickserv/sasl" }
module { name = "nickserv/cert" }

nickserv
{
    nick "NickServ"
    emailregistration yes
    forceemail yes
    maxaliases 5
    expire 90d
    displaytimeout 30s
    passlen 32
    /* 强制 SASL 登录 */
    forcesasl yes
}

/* === ChanServ 配置 === */
module { name = "chanserv/main" }
module { name = "chanserv/register" }
module { name = "chanserv/akick" }
module { name = "chanserv/autovoice" }
module { name = "chanserv/flags" }
module { name = "chanserv/log" }
module { name = "chanserv/set" }

chanserv
{
    nick "ChanServ"
    expire 14d
    maxregistered 20
    fantasy yes
    /* 快捷命令前缀 */
    fantasycharacter "!"
}

/* === OperServ 配置 === */
module { name = "operserv/main" }
module { name = "operserv/akill" }
module { name = "operserv/news" }
module { name = "operserv/stats" }
module { name = "operserv/jupe" }
module { name = "operserv/session" }
module { name = "operserv/sxline" }

/* === 日志配置 === */
log
{
    source { *; }
    target "/opt/anope/logs/services.log"
    logage 7d
    loguser yes
}

/* 在 UnrealIRCd 中添加服务链接 */
link services.example.com {
    incoming {
        mask 127.0.0.1;
    }
    password "services_link_password";  /* 与 Anope 配置一致 */
    class servers;
}

/* 定义服务伪客户端的 uline（信任） */
ulines {
    services.example.com;
}

cd /opt/anope
./services

# 或使用 systemd
sudo systemctl start anope
sudo systemctl status anope

# 安装依赖
sudo apt install -y build-essential git libssl-dev \
  libcurl4-openssl-dev libtre-dev pkg-config

# 克隆源码
git clone https://github.com/atheme/atheme.git
cd atheme
git checkout v7.3.0  # 使用稳定版本

# 编译
./configure --prefix=/opt/atheme --enable-contrib
make -j$(nproc)
make install

cd /opt/atheme/etc
cp atheme.conf.example atheme.conf
nano atheme.conf

# Atheme YAML 配置

# 服务器信息
serverinfo:
  name: "services.example.com"
  desc: "Channel Services"
  # 连接到主服务器
  uplink: "127.0.0.1"
  vhost: "services.example.com"
  netname: "MyIRCNet"
  adminname: "Alice"
  adminemail: "alice@example.com"
  loglevel: "info"
  # 数据库
  datastore:
    type: "flatfile"        # 或 "mysql"
    # mysql:
    #   host: "127.0.0.1"
    #   port: 3306
    #   user: "atheme"
    #   pass: "atheme_password"
    #   name: "atheme"
  # SASL
  sasl: "yes"

# 连接信息
uplink "irc.example.com":
  host: "127.0.0.1"
  port: 6900
  password: "services_link_password"

# 模块加载
loadmodule "nickserv/main"
loadmodule "nickserv/register"
loadmodule "nickserv/identify"
loadmodule "nickserv/group"
loadmodule "nickserv/cert"
loadmodule "nickserv/sasl"
loadmodule "chanserv/main"
loadmodule "chanserv/register"
loadmodule "chanserv/flags"
loadmodule "chanserv/akick"
loadmodule "hostserv/main"
loadmodule "hostserv/request"
loadmodule "operserv/main"
loadmodule "operserv/akill"
loadmodule "operserv/clones"
loadmodule "memoserv/main"

# NickServ 设置
nickserv:
  expire: 90d
  maxaliases: 5
  enforce: "strict"

# ChanServ 设置
chanserv:
  expire: 14d
  maxchans: 20
  fantasy: "yes"

# 日志
log:
  source: "*"
  target: "/opt/atheme/var/atheme.log"

/opt/atheme/bin/atheme -d /opt/atheme/var -f /opt/atheme/etc/atheme.conf

# systemd 服务
sudo systemctl start atheme

# Ergo 内置的账户系统
accounts:
  enabled: true
  # 注册
  registration:
    enabled: true
    cooldown: "24h"
    max-name-length: 32
    # 需要邮箱验证
    # email-verification: true

  # 登录
  login-throttling:
    enabled: true
    # 速率限制
    max-attempts: 5
    duration: "1m"

  # 密码策略
  bcrypt:
    enabled: true
    cost: 10

# NickServ 等效命令（在 Ergo 中直接使用）
# /NS REGISTER <password> <email>
# /NS IDENTIFY <password>
# /NS INFO <account>
# /NS GROUP <main_account>

#!/bin/bash
# backup_services.sh

DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_DIR="/opt/backups/services"

mkdir -p $BACKUP_DIR

# Anope 备份
cp /opt/anope/data/anope.db $BACKUP_DIR/anope_${DATE}.db

# 或 MySQL 备份
mysqldump -u anope -p anope > $BACKUP_DIR/anope_${DATE}.sql

# 保留最近 30 天
find $BACKUP_DIR -name "*.db" -mtime +30 -delete
find $BACKUP_DIR -name "*.sql" -mtime +30 -delete

echo "[${DATE}] 服务包备份完成"

# Anope 恢复
sudo systemctl stop anope
cp /opt/backups/services/anope_latest.db /opt/anope/data/anope.db
sudo systemctl start anope

# MySQL 恢复
mysql -u anope -p anope < /opt/backups/services/anope_latest.sql
sudo systemctl restart anope