From 7a5ab67f26424c445f9bdb2bffc105cdec9f190c Mon Sep 17 00:00:00 2001
From: Sadie Powell
Date: Thu, 19 Mar 2026 15:03:30 +0000
Subject: Allow overriding the oper restrictions on the fingerprint extban.

---
 docs/conf/modules.example.conf | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'docs')

diff --git a/docs/conf/modules.example.conf b/docs/conf/modules.example.conf
index 6626e75a6..1dc2c9b61 100644
--- a/docs/conf/modules.example.conf
+++ b/docs/conf/modules.example.conf
@@ -2653,6 +2653,11 @@
 # Does not do anything useful without a working TLS module and the
 # sslinfo module (see below).
 #<module name="sslmodes">
+#
+# By default the fingerprint extban can only be used by users who can
+# see fingerprints of other users (i.e. <sslinfo:operonly>). You can
+# override this behaviour with extbanoperonly.
+#<sslmodes extbanoperonly="yes">
 
 #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
 # TLS rehash signal module: Allows the TLS modules to be rehashed by
-- 
cgit v1.3.1-10-gc9f91