mirror of
https://github.com/prosolis/gogobee.git
synced 2026-07-15 00:32:40 +00:00
1adcd05dc7
Both session paths called GenerateAndUploadCrossSigningKeys unconditionally on every start. That published a fresh cross-signing identity each time the bot restarted, so every user's client saw the bot's verification break and had to re-verify it. The freshly-minted recovery key was only ever logged, never kept, so the identity couldn't be recovered either. bootstrapCrossSigning now mints once, persists the recovery key to DATA_DIR/cross_signing.json (0600), and on later starts reuses the stored identity untouched. Two escape hatches, both normally unset: CROSS_SIGNING_REGENERATE=1 forces exactly one remint (every user must then re-verify), and CROSS_SIGNING_RECOVERY_KEY imports an identity created before the bot persisted its own key. Shared by the appservice and masdevice paths, which had drifted into two copies of the same block.
178 lines
8.9 KiB
Plaintext
178 lines
8.9 KiB
Plaintext
# ---- Matrix Connection ----
|
|
# GogoBee authenticates via the MAS (Matrix Authentication Service) OAuth 2.0
|
|
# device grant. No password/token goes here: on first run the bot prints a URL
|
|
# + code to approve ONCE in a browser (logged in as BOT_USER_ID), then stores a
|
|
# refresh token in DATA_DIR/mas_auth.json and refreshes silently thereafter.
|
|
# To force re-authorization, delete data/mas_auth.json.
|
|
HOMESERVER_URL=https://matrix.example.com
|
|
BOT_USER_ID=@gogobee:example.com
|
|
BOT_DISPLAY_NAME=GogoBee
|
|
|
|
# ---- Auth mode ----
|
|
# masdevice (default) — MAS OAuth 2.0 device grant over /sync (above).
|
|
# appservice — Matrix appservice: the registration's as_token is the
|
|
# credential (no login/MFA/expiry, MAS-durable). The bot
|
|
# runs an HTTP listener and receives events over Synapse's
|
|
# transaction push instead of /sync (Synapse forbids AS
|
|
# users from /sync). E2EE rides MSC3202/MSC2409 + MSC4190.
|
|
AUTH_MODE=masdevice
|
|
# The following are required only when AUTH_MODE=appservice:
|
|
AS_REGISTRATION= # path to the appservice registration YAML (as_token/hs_token/namespaces)
|
|
AS_LISTEN_HOST= # bind address for the transaction listener (e.g. 0.0.0.0 or a tailnet IP)
|
|
AS_LISTEN_PORT= # bind port; Synapse's registration url must reach host:port
|
|
HOMESERVER_DOMAIN= # server_name, e.g. example.com (derives the bot MXID from sender_localpart)
|
|
|
|
# ---- Cross-signing (optional; both auth modes) ----
|
|
# Controls only whether the bot shows as VERIFIED in clients — E2EE works without it.
|
|
# Normally you set NEITHER of these. On its first start the bot mints a cross-signing
|
|
# identity and persists the recovery key itself to DATA_DIR/cross_signing.json (0600);
|
|
# every later start reuses that identity untouched, so users verify the bot once, ever.
|
|
#
|
|
# Set to 1 for exactly ONE start to throw away the published identity and mint a fresh
|
|
# one (the bot stores the new key itself). Every user must then verify the bot again.
|
|
# Needed only if the identity was lost, or to adopt one the bot can't re-sign.
|
|
CROSS_SIGNING_REGENERATE=
|
|
#
|
|
# Imports an existing recovery key into DATA_DIR/cross_signing.json on next start.
|
|
# Only useful to adopt an identity created before the bot persisted its own key.
|
|
CROSS_SIGNING_RECOVERY_KEY=
|
|
|
|
# Which rooms the bot posts scheduled content to (comma-separated room IDs)
|
|
BROADCAST_ROOMS=!roomid:example.com
|
|
|
|
# The daily 08:00 WOTD auto-post is disabled by default.
|
|
# Set to true to enable it. The !wotd command and passive WOTD
|
|
# usage tracking work regardless of this setting.
|
|
ENABLE_WOTD_POST=false
|
|
|
|
# Admins who can run admin-only commands (comma-separated Matrix user IDs)
|
|
ADMIN_USERS=@yourmxid:example.com
|
|
|
|
# ---- Runtime ----
|
|
DATA_DIR=./data
|
|
LOG_LEVEL=info
|
|
|
|
# ---- External API Keys (all optional) ----
|
|
RAWG_API_KEY=
|
|
DREAMDICT_URL=http://127.0.0.1:7777
|
|
CALENDARIFIC_API_KEY=
|
|
HOLIDAY_COUNTRIES=US,GB,CA,AU,PT,IN,JP,DE,FR,BR,MX,IT,ES,KR,NL,SE,NO,IE,NZ,ZA,PH
|
|
OPENWEATHER_API_KEY=
|
|
FINNHUB_API_KEY=
|
|
BANDSINTOWN_API_KEY=
|
|
TMDB_API_KEY=
|
|
SERPAPI_KEY= # SerpAPI key for image fetching (esteemed members)
|
|
|
|
# ---- Self-Hosted Services (optional) ----
|
|
LIBRETRANSLATE_URL=
|
|
OLLAMA_HOST=
|
|
OLLAMA_MODEL=
|
|
LLM_SAMPLE_RATE=0.15 # 0.0-1.0, fraction of non-keyword messages to classify (1.0 = all)
|
|
|
|
# ---- Feature Flags ----
|
|
FEATURE_URL_PREVIEW=
|
|
FEATURE_SHADE=
|
|
FEATURE_TRIVIA=true # set to "false" to disable trivia
|
|
FEATURE_ESTEEMED= # set to anything to enable satirical esteemed member posts
|
|
ESTEEMED_ROOM= # room ID for esteemed member posts (separate from broadcast rooms)
|
|
|
|
# ---- Games & Economy ----
|
|
GAMES_ROOM= # room ID where game commands work (trivia, hangman, blackjack, holdem, wordle, flip)
|
|
EURO_COOLDOWN_SECONDS=30 # cooldown between passive euro earning
|
|
EURO_DEBT_REMINDER=true # weekly DM reminder if in debt
|
|
EURO_STARTING_CAP=2500 # max starting balance from corpus
|
|
HANGMAN_MAX_WRONG_GUESSES=6
|
|
HANGMAN_SOLUTION_BONUS_MULTIPLIER=2
|
|
HANGMAN_PHRASE_FILE= # path to newline-delimited phrase file
|
|
BLACKJACK_TIMEOUT_SECONDS=60 # auto-play timeout per player turn
|
|
BLACKJACK_AUTOPLAY_THRESHOLD=15
|
|
BLACKJACK_MIN_BET=1
|
|
BLACKJACK_MAX_BET=500
|
|
BLACKJACK_DEBT_LIMIT=1000 # max debt before betting disabled
|
|
UNO_MIN_BET=10 # minimum wager in euros (solo)
|
|
UNO_POT_TAUNT_THRESHOLD=500 # pot size at which GogoBee starts taunting
|
|
UNO_MULTI_MIN_BET=25 # minimum ante for multiplayer UNO
|
|
UNO_MULTI_MAX_BET=500 # maximum ante for multiplayer UNO
|
|
UNO_MULTI_LOBBY_TIMEOUT=300 # lobby expiry in seconds (default 300 = 5min)
|
|
UNO_MULTI_TURN_TIMEOUT=30 # auto-play timeout in seconds (default 30)
|
|
UNO_MULTI_MAX_AUTOPLAY=3 # consecutive auto-plays before forfeit
|
|
|
|
# Texas Hold'em
|
|
HOLDEM_SMALL_BLIND=10 # small blind amount
|
|
HOLDEM_BIG_BLIND=20 # big blind amount
|
|
HOLDEM_MIN_BUYIN=200 # minimum balance to join
|
|
HOLDEM_MAX_BUYIN=2000 # maximum stack at buy-in
|
|
HOLDEM_TIMEOUT_SECONDS=90 # action timeout per turn
|
|
HOLDEM_NPC_NAME=TwinBee # NPC bot display name
|
|
HOLDEM_NPC_HOUSE_BALANCE=10000 # NPC starting bankroll
|
|
HOLDEM_CFR_POLICY=data/policy.gob # path to CFR policy file
|
|
|
|
# Wordle
|
|
WORDLE_DEFAULT_LENGTH=5 # default word length (5, 6, or 7)
|
|
|
|
# ---- Space Groups (automatic room grouping for community-wide leaderboards) ----
|
|
SPACE_GROUP_THRESHOLD=50 # % of smaller room's members that must overlap (1-100, default 50)
|
|
|
|
# ---- Missing Members (!haveyouseenthem / !missing) ----
|
|
MISSING_THRESHOLD_DAYS=14 # days of inactivity before considered missing
|
|
MISSING_MAX_DAYS=90 # days after which they're considered gone, not missing
|
|
MISSING_MIN_MESSAGES=10 # minimum lifetime messages to be eligible
|
|
MISSING_EXCLUDE_USERS= # comma-separated user IDs to never list as missing
|
|
|
|
# ---- Encryption ----
|
|
QUOTE_ENCRYPTION_KEY= # Base64-encoded 32-byte AES-256 key (required for !quote)
|
|
|
|
# ---- Moderation (disabled by default) ----
|
|
FEATURE_MODERATION= # set to "true" to enable the moderation system
|
|
MOD_WORDLIST= # path to newline-delimited word list file
|
|
MOD_WORDLIST_VARIATIONS=true # check leetspeak/spaced variants
|
|
MOD_STRIKE_EXPIRY_DAYS=30 # strikes expire after N days
|
|
MOD_MUTE_DURATION_MINUTES=60 # temp mute duration on strike 2
|
|
MOD_MAX_STRIKES=3 # strikes before permanent ban
|
|
MOD_FLOOD_MESSAGE_COUNT=5 # messages within window = flood
|
|
MOD_FLOOD_MESSAGE_WINDOW_SECONDS=10
|
|
MOD_FLOOD_IMAGE_COUNT=3 # images/files within window = flood
|
|
MOD_FLOOD_IMAGE_WINDOW_SECONDS=30
|
|
MOD_MAX_MESSAGE_LENGTH=2000 # max chars per message (0 = disabled)
|
|
MOD_REPEAT_COUNT=3 # same message N times = strike
|
|
MOD_REPEAT_WINDOW_SECONDS=60
|
|
MOD_REPEAT_SIMILARITY_THRESHOLD=0.85
|
|
MOD_MENTION_MAX=5 # max unique @mentions per message
|
|
MOD_MENTION_FLOOD_COUNT=3
|
|
MOD_MENTION_FLOOD_WINDOW_SECONDS=30
|
|
MOD_LINK_RATE_NEW_MEMBER=3 # max links per window (new members only)
|
|
MOD_LINK_RATE_WINDOW_SECONDS=60
|
|
MOD_INVITE_MAX_PER_HOUR=5
|
|
MOD_JOIN_LEAVE_COUNT=3 # join/leave cycles = flag (no auto-strike)
|
|
MOD_JOIN_LEAVE_WINDOW_MINUTES=10
|
|
MOD_NEW_MEMBER_DAYS=14 # accounts newer than N days = stricter thresholds
|
|
MOD_NEW_MEMBER_FLOOD_MULTIPLIER=0.5
|
|
MOD_ADMIN_ROOM= # dedicated admin room for mod notifications
|
|
MOD_DM_ON_ACTION=true # DM users when action is taken
|
|
|
|
# ---- Miniflux RSS ----
|
|
MINIFLUX_URL= # Miniflux instance URL (e.g. https://rss.example.com)
|
|
MINIFLUX_API_KEY= # Miniflux API key
|
|
MINIFLUX_POLL_INTERVAL=15 # minutes between polls (default 15)
|
|
MINIFLUX_DEFAULT_ROOM= # default room for feed posts (falls back to BROADCAST_ROOMS)
|
|
MINIFLUX_MAX_PER_POLL=5 # max entries per feed per poll (default 5)
|
|
|
|
# ---- Rate Limits (per user per day) ----
|
|
RATELIMIT_WEATHER=5
|
|
RATELIMIT_TRANSLATE=20
|
|
RATELIMIT_CONCERTS=10
|
|
|
|
# ---- Email Nag (one-shot migration helper: collect+verify missing Authentik emails over Matrix DM) ----
|
|
FEATURE_EMAIL_NAG= # set to "true" to enable
|
|
EMAIL_NAG_AUTHENTIK_URL= # e.g. https://authentik.parodia.dev
|
|
EMAIL_NAG_AUTHENTIK_TOKEN= # Authentik service-account token, scoped to user write
|
|
EMAIL_NAG_RESEND_KEY= # Resend API key (sends the verification code)
|
|
EMAIL_NAG_MAIL_FROM= # e.g. Parodia <noreply@mail.parodia.dev>
|
|
EMAIL_NAG_HOME_DOMAIN= # Matrix server name, e.g. parodia.dev (builds @user:domain)
|
|
EMAIL_NAG_TARGETS= # comma-separated Authentik usernames to nag (== Matrix localparts)
|
|
EMAIL_NAG_CODE_TTL=30m # verification code lifetime (default 30m)
|
|
EMAIL_NAG_MAX_ATTEMPTS=5 # wrong-code attempts before restart (default 5)
|
|
EMAIL_NAG_MAX_SENDS_PER_HOUR=5 # cap on verification emails per user per rolling hour (anti-spam, default 5)
|
|
EMAIL_NAG_SWEEP_DELAY=2s # delay between DMs during the startup sweep (default 2s)
|
|
EMAIL_NAG_REPROMPT_COOLDOWN= # re-nag non-responders whose last prompt is older than this (e.g. 72h); empty/0 = nag once
|