Panic mode

What it's for

A nuke is when someone with power wrecks a server: they delete the channels and roles and ban everyone. Anti-Nuke already stops the attacker after the first few actions. But those first few actions still happened. Two channels may be gone.

Panic mode handles the aftermath for you. It's built for the attack that happens at four in the morning.

Turn it on

1. 1

   Get Pro

   Panic mode is part of Bastion Pro.

2. 2

   Open Anti-Nuke in the dashboard

   Only the server owner and trusted people can change it.

3. 3

   Open Advanced settings

   Find the group called Panic mode.

4. 4

   Switch on Turn on panic mode

   The other switches appear, already on. Press Save.

Then read Before you switch it on, below. Panic mode can only restore a backup that exists.

What happens when it fires

1. 1

   Anti-Nuke catches an attack

   Someone goes over an anti-nuke limit, for example deleting 3 channels in a minute, or reaches 100 on the attack score. Handing out a dangerous permission, a mass prune, a changed custom invite link or freeing a quarantined member also count.

2. 2

   The attacker is stopped

   Anti-Nuke applies its punishment. By default that's quarantine, which removes their roles on the spot.

3. 3

   Channels lock

   Every channel that @everyone can talk in is locked, the same way /lockdown start does it. Nothing more can be posted while things are put right.

4. 4

   Staff roles lose their powers

   Dangerous permissions come off every ordinary role below Bastion, the same way /lockdown roles does it. If the attacker has a second staff account, it can't do anything either.

5. 5

   Moderation commands pause

   Bastion refuses its own moderation commands from everyone except the owner and trusted people. A stolen moderator account can't use Bastion to ban people.

6. 6

   Missing roles and channels come back

   If the attack included a burst of channel or role deletes, the missing ones are recreated from your newest backup. Other kinds of attack skip this step, because there's nothing to rebuild.

7. 7

   You're told

   A report goes to your security log channel, including what was locked and restored and how long the panic lasts. Your alert roles are pinged, if you chose any.

8. 8

   It ends by itself

   After 15 minutes Bastion unlocks the channels, gives every role its permissions back and lets the commands work again. It posts Panic mode ended in your log.

To end it sooner, the owner or a trusted person runs /lockdown end. That one command ends the panic and every lock with it.

What gets paused

With Pause Bastion's moderation commands on, these are refused for everyone except the owner and trusted people until the panic ends:

• /ban, /unban, /kick, /timeout, /untimeout, /warn and /warnings.
• /purge, /slowmode, /quarantine and /lockdown.
• /case, /cases and /note.
• /softban, /nick, /info and /cleanup.
• Right-click actions on members and messages.
• The buttons on appeals and on member reports, and the Confirm button on a ban or kick.

Administrators and moderator roles are refused like everyone else. They see a message saying the commands are paused and who can end it. Members can still report messages and verify, and /setup, /status, /help and /backup still work.

Settings

Panic mode lives under Advanced settings on the Anti-Nuke page.

The inner switches are already on, so turning panic mode on gives you the full response. Turn any of them off if you only want the rest.

Before you switch it on

1. 1

   Make a backup

   Run /backup create. Panic mode can only restore a backup that exists.

2. 2

   Turn on automatic backups

   On the Backups page, switch on automatic backups so the latest copy is never far out of date. The default is one every 24 hours.

3. 3

   Check role position

   Bastion's role must be at the top, or it can't quarantine the attacker. Run /status.

4. 4

   Set a log channel

   Otherwise you won't know it fired.

What it won't do

• It won't fire for the owner or a trusted person. They skip anti-nuke completely. This is the best reason to keep the trusted list short.
• It can't punish someone ranked above Bastion. The lock and the restore still happen, and the owner is messaged directly.
• It won't unban members who were banned in the attack. Use /unban for those.
• It won't undo a lock your staff took over. If someone runs /lockdown start or /lockdown roles during a panic, that lock is theirs and stays until /lockdown end.
• It won't start twice. A second attack during a panic keeps what's locked and runs until the later of the two end times.

Panic mode and raid panic

These are two different things with similar names. Panic mode responds to a nuke and is described here. Raid panic is an Automod setting that reacts when several members spam at the same moment. Both are Pro.