Znc

doas nano /home/znc/home/znc/.znc/configs/znc.conf

run znc:
 HOME=/home/znc && /usr/sbin/chroot -u znc -g znc /home/znc znc >>/var/log/znc.log 2>&1 &

kill znc:

```text
<Error> ps -aux | grep znc
<Error> kill -9 the znc pid
```

export HOME=/home/znc
 doas pkill -KILL znc

```text
<jrmu> Almajd: run $ doas su
<jrmu> # export HOME=/home/znc
<jrmu> # chroot -u znc -g znc /home/znc znc -D
```

Copy ssl to znc
 doas cp /etc/ssl/domain-name.fullchain.pem /home/znc/home/znc/.znc/
 doas cp /etc/ssl/private/domain-name.key /home/znc/home/znc/.znc/

1- doas adduser

```text
Name: znc
Password: ****
Fullname: znc
Uid: 1001
Gid: 1001 (znc)
Groups: znc
Login Class: default
HOME: /home/znc
Shell: /sbin/nologin
OK? (y/n) [y]: y
```

2- doas rm /etc/login.conf.db

3- doas chsh -s /bin/ksh znc

4- doas su -c znc znc

5- ulimit -a

6- Install needed dependencies:
 $ doas pkg_add icu4c-68.2v0
 $ doas pkg_add boost-1.72.0
 $ doas pkg_add cmake-3.19.4p0v0

7- uname -a
 OpenBSD Almajd.host.ircnow.org 6.9 GENERIC#464 amd64

8- doas syspatch

9- $ cd ~
 $ curl -L -O https://ircnow.org/software/znc-1.8.2a.tar.gz
 $ tar xvzf znc-1.8.2a.tar.gz
 $ cd znc-1.8.2
 $ mkdir build
 $ cd build
 $ cmake ..
 $ make
 $ doas make install

10- /usr/local/bin/znc --makeconf < to generate a config file.

```text
[ .. ] Checking for list of available modules...
[ ** ]
[ ** ] -- Global settings --
[ ** ]
[ ?? ] Listen on port (1025 to 65534): 31337
[ ?? ] Listen using SSL (yes/no) [no]: yes
[ ?? ] Listen using both IPv4 and IPv6 (yes/no) [yes]: no
[ .. ] Verifying the listener...
[ ** ] Unable to locate pem file: [/home/znc/.znc/znc.pem], creating it
[ .. ] Writing Pem file [/home/znc/.znc/znc.pem]...
[ ** ] Enabled global modules [webadmin]
[ ** ]
[ ** ] -- Admin user settings --
[ ** ]
[ ?? ] Username (alphanumeric):
```

11- lunch znc now: no

12- cp /etc/ssl/domain-name.fullchain.pem /home/znc/home/znc/.znc/
 cp /etc/ssl/private/domain-name.key /home/znc/home/znc/.znc/
 chown znc:znc /home/znc/home/znc/.znc/domain-name.com.*

13- openssl dhparam -out dhparam.pem 2048
 doas chown znc:znc dhparam.pem
 doas mv dhparam.pem /home/znc/.znc/

14- Afterwards, to run znc:

```text
# export HOME=/home/znc
# /usr/sbin/chroot -u znc -g znc /home/znc znc >>/var/log/znc.log 2>&1 &
```

15- /msg *status saveconfig

```text
<*status> Wrote config to /home/znc/.znc/configs/znc.conf
```

16- add this at the top of /home/znc/.znc/configs/znc.conf

```text
// WARNING
//
// Do NOT edit this file while ZNC is running!
// Use webadmin or *controlpanel instead.
//
// Altering this file by hand will forfeit all support.
//
// But if you feel risky, you might want to read help on /znc saveconfig and /znc rehash.
// Also check https://wiki.znc.in/Configuration

AnonIPLimit = 10000
AuthOnlyViaModule = false
ConfigWriteDelay = 60
ConnectDelay = 1
HideVersion = false
LoadModule = chansaver
LoadModule = lastseen
LoadModule = adminlog
LoadModule = identfile
LoadModule = webadmin
LoadModule = certauth
MaxBufferSize = 10000
PidFile = /home/znc/.znc/znc.pid
ProtectWebSessions = true
SSLCertFile = /home/znc/.znc/domain-name.fullchain.pem
SSLDHParamFile = /home/znc/.znc/dhparam.pem
SSLKeyFile = /home/znc/.znc/domain-name.org.key
ServerThrottle = 1
Skin = forest
StatusPrefix = *
Version = 1.8.2

AllowIRC = true
 AllowWeb = false
 Host = 38.87.162.30
 IPv4 = true
 IPv6 = false
 Port = 1337
 SSL = false
 URIPrefix = /
</Listener>

AllowIRC = true
 AllowWeb = false
 Host = 38.87.162.30
 IPv4 = true
 IPv6 = false
 Port = 31337
 SSL = true
 URIPrefix = /
</Listener>

AllowIRC = true
 AllowWeb = false
 Host = 2602:fccf:1:1030::
 IPv4 = false
 IPv6 = true
 Port = 1337
 SSL = false
 URIPrefix = /
</Listener>

AllowIRC = true
 AllowWeb = false
 Host = 2602:fccf:1:1030::
 IPv4 = false
 IPv6 = true
 Port = 31337
 SSL = true
 URIPrefix = /
</Listener>

AllowIRC = true
 AllowWeb = false
 Host = 127.0.0.1
 IPv4 = true
 IPv6 = false
 Port = 1337
 SSL = false
 URIPrefix = /
</Listener>

AllowIRC = false
 AllowWeb = true
 Host = 127.0.0.1
 IPv4 = true
 IPv6 = false
 Port = 1338
 SSL = false
 URIPrefix = /
</Listener>
```

17- doas crontab -e // env EDITOR=nano crontab -e
 Add a few lines to have ZNC reconnect every 5 minutes. ZNC will only connect if no other ZNC instance is running:
 HOME=/home/znc
 */5 * * * * /usr/sbin/chroot -u znc -g znc /home/znc znc >>/var/log/znc.log 2>&1 &

18- While you are at it, you will want to redirect any plaintext requests to the webpanel on port 80 to use SSL on port 443. Add this to /etc/httpd.conf:

```text
server "bnc.almajd.host.ircnow.org" {

listen on * port 80
        location "/.well-known/acme-challenge/*" {
                root "/acme"
                request strip 2
        }
        location * {
                block return 302 "https://$HTTP_HOST$REQUEST_URI"
        }
}
```

19- doas rcctl restart httpd

20- Integration with the operating system
 doas touch /etc/rc.d/znc
 doas chmod +x /etc/rc.d/znc

21- $OpenBSD: znc,v 1.2 2020/01/21 19:27:07 rpe Exp $
 daemon_pidfile="/home/znc/home/znc/.znc/znc.pid"
 daemon="env HOME=/home/znc /usr/sbin/chroot -u znc -g znc /home/znc znc"

22- doas mkdir /usr/local/project_name/
 doas touch /usr/local/project_name/checker_znc.sh
 doas chmod +x /usr/local/project_name/checker_znc.sh

23- Now you must add this rule in /etc/pf.conf:
 pass in log quick proto tcp to port {http https} keep state (max-src-conn 30, max-src-conn-rate 20/60) #relayd web
 pass in log quick proto tcp to port {1337 31337} keep state (max 3000, max-src-conn 200) #bnc