a nuke is somebody with permissions they shouldn’t have, like a stolen admin account, a bot that turned or a mod having a bad night, deleting channels, banning people, or handing out administrator. antinuke watches the audit log, undoes what it can the moment it happens, and punishes whoever crosses a limit.
antinuke is off until you run ,antinuke setup or switch it on from the dashboard.

who can use it

only the server owner and antinuke admins. being a server administrator isn’t enough, because a compromised administrator is exactly what antinuke is for. only the owner can name or remove an antinuke admin: ,antinuke admin @heri names them, and running it again on the same person removes them.

setting it up

open the dashboard, pick your server and go to antinuke. only the owner and antinuke admins can open it. switching it on checks drain can protect the server and takes a backup first. pick where reports go (off sends them to the owner instead), then set each guard: on or off, how many actions trip it, the window, and the punishment. the same page holds who’s trusted and, for the owner alone, the antinuke admins.

the guards

every guard starts on, with strip as the punishment, except joins, which kicks.
administrator, manage server, manage roles, manage channels, ban members, kick members, manage webhooks, moderate members, manage expressions, mention everyone, manage messages, manage threads, manage events and view audit log.

changing a guard

1 to 50
how many actions trip the guard
10s to 1d
how far back those actions are counted
strip | stripban | kick | ban
what happens to whoever trips it
switch
turn the guard on or off

what happens when a guard trips

1

undone straight away

some things are reversed on the first action, before any threshold: dangerous permissions taken back off roles, dangerous roles taken back off members, channel overwrites reverted, added bots kicked, new or edited webhooks deleted.
2

counted

each action is counted for that person and that guard.
3

punished

at the threshold drain punishes them, once per person every five minutes.a bot is always kicked, or banned if the punishment bans.
4

rebuilt

after a channels or roles punishment, drain rebuilds whatever that person deleted in the last hour.
5

reported

to the antinuke log channel, and by dm to the server owner.

panic

panic makes every guard trip on the first action for thirty minutes, and pauses invites and dms for an hour. it starts on its own when:
  • two different guards trip within a minute
  • five destructive audit log entries with no name on them arrive within thirty seconds
  • discord flags a raid on the server
or by hand, with ,antinuke panic. ,antinuke calm ends it and lifts the pause.

trusting people

the server owner is never stopped. anybody else you trust can be let past every guard, or just one.
antinuke admins are not trusted automatically. an admin can set antinuke up and still be stopped by it.

backups and restoring

drain keeps a backup of every role and channel. it updates whenever one is created or changed, refreshes everything every six hours, and keeps deleted ones for seven days. ,antinuke restore --hours 24 rebuilds roles and channels deleted in the last 1 to 168 hours, after you confirm.
  • a rebuilt role or channel gets a new id, so anything pointing at the old id (other bots, pinned links) needs updating
  • a rebuilt role is handed back to up to 1,000 of the members who had it
  • permissions are cut down to what drain itself holds, unless drain has administrator
  • text, announcement, voice, stage, forum channels and categories can be rebuilt; managed roles and @everyone can’t
a vanity url can’t be put back once somebody changes it. discord gives it to whoever claims it next.

every command

worth knowing

  • moderators banning or kicking by hand count toward bans like anybody else. trust your moderators, or have them use drain’s own ,ban: actions drain takes are never counted
  • automod rules drain makes for you never trip the settings guard
  • if drain leaves the server, every antinuke setting and backup for it is deleted