Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

documentation is inconsistent as to whether config file editing is supported #92

Open
slingamn opened this issue Jun 29, 2021 · 1 comment

Comments

@slingamn
Copy link

https://docs.limnoria.net/use/configuration.html says, referring to config file editing, "NOTE: We don’t recommend this and you shouldn’t ever do this, you should do everything with the commands in the Config plugin."

However, https://docs.limnoria.net/use/security.html suggests disabling the Config plugin and editing the files instead as a hardening measure: "Finally, you can remove the owner user account entirely (or remove the owner capability) for that account [....] global configuration variables can only be modified by accessing the config files."

I would prefer to run in an ownerless configuration, but I had problems earlier editing the config files manually (it seemed like my changes were being undone, even though I was editing the files only while the bot was stopped?)

@progval
Copy link
Collaborator

progval commented Jun 29, 2021

It's not that inconsistent. I don't recommend editing the config file, but IF you really want to harden, you should edit it.

but I had problems earlier editing the config files manually

you need to @flush before editing, spend less than supybot.upkeepinterval editing (defaults to 1 hour), then @config reload after

even though I was editing the files only while the bot was stopped?

wat?!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants