From 7abf9b26d17587478be3929c2b67a956496f60a3 Mon Sep 17 00:00:00 2001
From: root <root@rke2-server.iamworkin.lan>
Date: Mon, 9 Mar 2026 17:24:34 -0500
Subject: [PATCH] IRC: fix TLS key perms (644 for ircd user), add Anope
 readtimeout

---
 apps/irc/irc.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/apps/irc/irc.yaml b/apps/irc/irc.yaml
index 01ab696..f17c5b5 100644
--- a/apps/irc/irc.yaml
+++ b/apps/irc/irc.yaml
@@ -208,6 +208,8 @@ stringData:
     {
     	casemap = "ascii"
     	strictpasswords = yes
+    	readtimeout = 5s
+    	warningtimeout = 4h
     }
 
     module { name = "enc_sha256" }
@@ -379,7 +381,8 @@ spec:
               cp /tls-secret/tls.crt /tls/server.cert.pem
               cp /tls-secret/tls.key /tls/server.key.pem
               chmod 644 /tls/server.cert.pem
-              chmod 600 /tls/server.key.pem
+              chmod 644 /tls/server.key.pem
+              chown 1000:1000 /tls/server.cert.pem /tls/server.key.pem 2>/dev/null || true
           volumeMounts:
             - name: irc-tls-secret
               mountPath: /tls-secret