; qdb: TLS tunnel for the IRC logger --- OPTIONAL.
;
; Only needed when the IRC server is REMOTE. ii is plaintext-only, so
; stunnel wraps the connection; ii then dials the local plaintext end
; (127.0.0.1:6667). If the ircd runs on the same host as qdb (the
; simulacra case --- a local ngircd), ii talks to it over loopback
; directly and this file / qdb-stunnel.service are unused.
;
; To use it: set `connect` below to your remote server, then
; `systemctl --user enable --now qdb-stunnel`.
;
; foreground = yes keeps stunnel in the foreground so systemd can
; supervise it directly; its log goes to stdout -> the journal.

foreground = yes
output = /dev/stdout

[irc-someodd]
client = yes
accept = 127.0.0.1:6667
connect = irc.someodd.zip:6697

; Verify the server certificate against the system CA bundle. If the
; IRC server uses a self-signed or otherwise unverifiable cert, the
; tunnel will refuse to come up --- see README.txt for how to relax
; this deliberately.
verifyChain = yes
CAfile = /etc/ssl/certs/ca-certificates.crt
checkHost = irc.someodd.zip