From 251fc15143d938f417c8f7424dce58a391d12b41 Mon Sep 17 00:00:00 2001
From: Andrew Stoltz <1578013+astoltz@users.noreply.github.com>
Date: Fri, 19 Jun 2026 18:26:01 -0500
Subject: [PATCH] deploy(irc): define FlowerCore readonly RPC class

---
 apps-gx10/irc/irc.yaml | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/apps-gx10/irc/irc.yaml b/apps-gx10/irc/irc.yaml
index f97d566..09ad227 100644
--- a/apps-gx10/irc/irc.yaml
+++ b/apps-gx10/irc/irc.yaml
@@ -666,10 +666,21 @@ data:
       class opers;
     }
 
+    rpc-class flowercore-readonly {
+      permissions {
+        rpc { info; }
+        server { list; get; }
+        channel { list; get; }
+        user { list; get; }
+        stats { get; }
+        server_ban { list; get; }
+      }
+    }
+
     rpc-user flowercorereadonly {
       match { ip 10.*; }
       password "__RPC_PASSWORD_HASH__";
-      rpc-class readonly;
+      rpc-class flowercore-readonly;
     }
 
     drpass {
@@ -1021,7 +1032,7 @@ spec:
       labels:
         app: unrealircd
       annotations:
-        flowercore.io/config-revision: "irc-r1-rpc-hashed-password-20260619"
+        flowercore.io/config-revision: "irc-r1-rpc-custom-readonly-20260619"
     spec:
       initContainers:
         - name: inject-credentials