From aae97bda3ea3452e8a6a3da82d3cfdf0adb8e038 Mon Sep 17 00:00:00 2001
From: Sadie Powell
Date: Tue, 2 May 2023 13:33:31 +0100
Subject: Add <cloak:class> to limit cloaks to a specific connect class.

---
 docs/conf/modules.conf.example | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'docs')

diff --git a/docs/conf/modules.conf.example b/docs/conf/modules.conf.example
index 74643a53c..5aecd58de 100644
--- a/docs/conf/modules.conf.example
+++ b/docs/conf/modules.conf.example
@@ -561,12 +561,14 @@
 #
 #<cloak method="half"
 #       key="changeme"
+#       class=""
 #       domainparts="3"
 #       prefix="net-"
 #       ignorecase="no">
 #
 #<cloak method="full"
 #       key="changeme"
+#       class=""
 #       prefix="net-"
 #       ignorecase="no">
 
@@ -586,6 +588,10 @@
 #  key       -  The secret key to use when hashing hostnames. This    #
 #               MUST be at least 30 characters long.                  #
 #                                                                     #
+#  class     - If non-empty then a comma-delimited list of connect    #
+#              class names that a user has to be in to get the cloak  #
+#              from this tag.                                         #
+#                                                                     #
 #  prefix    - A freeform value to prefix cloaks with. This must not  #
 #              contain spaces.                                        #
 #                                                                     #
@@ -615,6 +621,7 @@
 #
 #<cloak method="hmac-sha256"
 #       key="changeme"
+#       class=""
 #       prefix="MyNet"
 #       suffix="ip"
 #       case="lower"
@@ -624,6 +631,7 @@
 #
 #<cloak method="hmac-sha256-ip"
 #       key="changeme"
+#       class=""
 #       prefix="MyNet"
 #       suffix="ip"
 #       case="lower"
-- 
cgit v1.3.1-10-gc9f91