The setup wizard

What the wizard does

Until setup is finished, your server's dashboard shows a Finish setup button. It opens a short wizard with four steps.

If you've just added Bastion, you skip the button. Press Add next to a server on the dashboard's server list. Discord opens, you approve, and you land straight back on that server's setup page. If you cancel in Discord, you go back to the server list, with a note saying Bastion wasn't added.

1. Move Bastion to the top. Drag the Bastion role to the top and run /setup. Only the owner, a trusted person or an Administrator can run it. The wizard shows whether both are done. You can skip this, but Bastion can't stop anyone above its role until it's done.
2. Pick a security level. Relaxed, Balanced or Strict.
3. Choose where alerts go. Pick a channel only staff can see. If you ran /setup, pick the bastion-logs channel it made.
4. Done. A summary of what's set.

Only the server owner and trusted people can use the wizard. Anyone else who opens it sees a note asking them to get the owner. Once setup is finished, the Change level link on the server's overview page opens the wizard again.

The one real question is how strict Bastion should be. Your answer is called the security level. It sets the limits for Anti-Nuke, Automod, the Join Gate and Anti-Raid in one go. You can change any single setting afterwards.

The three levels compared

• Relaxed suits busy, chatty servers where people post fast and a false alarm would annoy everyone.
• Balanced suits almost everyone. It's the default.
• Strict suits servers that are being attacked, or that would rather be safe than friendly.

Role position

Discord has one firm rule for bots: a bot can only act on members whose highest role is below the bot's own role. If an admin role sits above Bastion, Bastion can't quarantine, kick or ban anyone holding it.

1. 1

   Open the role list

   In Discord, go to Server Settings, then Roles.

2. 2

   Drag Bastion to the top

   Hold the Bastion role and drag it above every other role, including your admin roles and other bots.

3. 3

   Save and check

   Save changes, then run /status. The line about Bastion's role should now be ticked.

This one step is worth 20 points of your security score.

What /setup creates

Running /setup in Discord does four things:

• Creates a role called Quarantined, with no permissions, and hides every channel from it. This is the role used by quarantine. If the role already exists, Bastion hides every channel from it again, which repairs any channel that was missed or changed.
• Creates a private channel called bastion-logs and sets it as your security log. Only Bastion and administrators can see it until you add your moderator role in the channel's permissions. If you already chose a log channel, yours is kept.
• Checks that Bastion's role is at the top.
• Checks that Bastion has the permissions it needs, and lists any that are missing.

If there's already a bastion-logs channel that everyone can see, Bastion doesn't use it. It makes a new private one and tells you, so you can delete the old one. A hidden bastion-logs left over from an earlier setup is used again.

/setup never deletes or renames anything you already have, so it's safe to run again at any time. It also runs the same checks as /status, so your security score is up to date.