From cea19a7ffc2303a6aca0901c7b267dfb2d72935d Mon Sep 17 00:00:00 2001
From: root <root@rke2-server.iamworkin.lan>
Date: Mon, 9 Mar 2026 17:26:30 -0500
Subject: [PATCH] IRC: add system CA bundle, define Services Root opertype for
 Anope

---
 apps/irc/irc.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/apps/irc/irc.yaml b/apps/irc/irc.yaml
index f17c5b5..62151f5 100644
--- a/apps/irc/irc.yaml
+++ b/apps/irc/irc.yaml
@@ -160,6 +160,7 @@ stringData:
       tls {
         certificate "/app/conf/tls/server.cert.pem";
         key "/app/conf/tls/server.key.pem";
+        trusted-ca-file "/etc/ssl/certs/ca-certificates.crt";
       }
     }
 ---
@@ -307,6 +308,13 @@ stringData:
     	nick = "Global"
     }
 
+    opertype
+    {
+    	name = "Services Root"
+    	commands = "*"
+    	privs = "*"
+    }
+
     oper
     {
     	name = "bluejay"