ThomasandClaude Sonnet 5
9829688a85
New "webadmin" service (Flask + PyMySQL, port 8081) backing a small server-rendered admin UI: - Login gated on an existing game account: only accounts with accesslevel >= ADMIN_MIN_ACCESSLEVEL (default 900) get in. Password is MD5-hashed before comparison since the game client hashes it client-side before it ever hits the wire -- accounts.password is always an MD5 hex digest, confirmed against existing DB rows. - Accounts: list/search, create, edit accesslevel/active/password. - Characters: list/search, create (mirrors the real char-creation INSERT in Src/Char Server/charpackets.cpp -- only account_name, char_name, face, hairStyle, sex are set, everything else relies on the table's own defaults), edit core stats (level, zuly, attributes, hp/mp, stat/skill points) and isgm/isdev flags directly. All queries are parameterized (no string-formatted SQL). No CSRF protection or rate limiting yet -- acceptable for a small already-behind-a-high-accesslevel-gate private server, worth revisiting before ever exposing this port publicly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
114 lines
2.9 KiB
YAML
114 lines
2.9 KiB
YAML
x-app: &app
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
image: rose-server:latest
|
|
restart: unless-stopped
|
|
environment: &app-env
|
|
DB_HOST: db
|
|
DB_PORT: "3306"
|
|
DB_USER: ${DB_USER:-rose}
|
|
DB_PASSWORD: ${DB_PASSWORD:-change_me}
|
|
DB_NAME: ${DB_NAME:-ktrose}
|
|
PUBLIC_HOST: ${PUBLIC_HOST:-127.0.0.1}
|
|
CHAR_HOST: charserver
|
|
LOGIN_PORT: ${LOGIN_PORT:-29000}
|
|
LOGIN_SERVER_NAME: ${LOGIN_SERVER_NAME:-ROSE Login}
|
|
LOGIN_CREATE_ACCOUNT: ${LOGIN_CREATE_ACCOUNT:-1}
|
|
CHAR_PORT: ${CHAR_PORT:-29100}
|
|
CHAR_S2S_PORT: ${CHAR_S2S_PORT:-29110}
|
|
CHAR_SERVER_NAME: ${CHAR_SERVER_NAME:-Server 1}
|
|
CHAR_DELETE_TIME: ${CHAR_DELETE_TIME:-3600}
|
|
WORLD_PORT: ${WORLD_PORT:-29200}
|
|
WORLD_S2S_PORT: ${WORLD_S2S_PORT:-29210}
|
|
WORLD_CHANNEL_NAME: ${WORLD_CHANNEL_NAME:-Channel 1}
|
|
WORLD_MAX_CONNECTIONS: ${WORLD_MAX_CONNECTIONS:-500}
|
|
WORLD_WELCOME_MSG: ${WORLD_WELCOME_MSG:-Welcome to ROSS}
|
|
WORLD_SAVE_TIME: ${WORLD_SAVE_TIME:-3600}
|
|
SHARED_LOGIN_PASS: ${SHARED_LOGIN_PASS:-789456}
|
|
SHARED_CHAR_PASS: ${SHARED_CHAR_PASS:-456123}
|
|
SHARED_WORLD_PASS: ${SHARED_WORLD_PASS:-321654}
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
|
|
services:
|
|
db:
|
|
image: mariadb:11
|
|
restart: unless-stopped
|
|
environment:
|
|
MYSQL_RANDOM_ROOT_PASSWORD: "1"
|
|
MYSQL_DATABASE: ${DB_NAME:-ktrose}
|
|
MYSQL_USER: ${DB_USER:-rose}
|
|
MYSQL_PASSWORD: ${DB_PASSWORD:-change_me}
|
|
volumes:
|
|
- db-data:/var/lib/mysql
|
|
- "./database sql files:/docker-entrypoint-initdb.d:ro"
|
|
healthcheck:
|
|
test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 20
|
|
|
|
loginserver:
|
|
<<: *app
|
|
command: ["login"]
|
|
ports:
|
|
- "${LOGIN_PORT:-29000}:${LOGIN_PORT:-29000}"
|
|
volumes:
|
|
- logs:/var/log/roseserver
|
|
|
|
charserver:
|
|
<<: *app
|
|
command: ["char"]
|
|
ports:
|
|
- "${CHAR_PORT:-29100}:${CHAR_PORT:-29100}"
|
|
volumes:
|
|
- logs:/var/log/roseserver
|
|
- clanmark:/data/clanmark
|
|
|
|
worldserver:
|
|
<<: *app
|
|
command: ["world"]
|
|
ports:
|
|
- "${WORLD_PORT:-29200}:${WORLD_PORT:-29200}"
|
|
volumes:
|
|
- logs:/var/log/roseserver
|
|
- "./Binary/3DData:/data/3DData:ro"
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
charserver:
|
|
condition: service_started
|
|
|
|
webtools:
|
|
image: nginx:alpine
|
|
restart: unless-stopped
|
|
ports:
|
|
- "80:80"
|
|
volumes:
|
|
- "./webtools:/usr/share/nginx/html:ro"
|
|
|
|
webadmin:
|
|
build:
|
|
context: ./webadmin
|
|
restart: unless-stopped
|
|
environment:
|
|
DB_HOST: db
|
|
DB_PORT: "3306"
|
|
DB_USER: ${DB_USER:-rose}
|
|
DB_PASSWORD: ${DB_PASSWORD:-change_me}
|
|
DB_NAME: ${DB_NAME:-ktrose}
|
|
ADMIN_SECRET_KEY: ${ADMIN_SECRET_KEY:-change-me-too}
|
|
ADMIN_MIN_ACCESSLEVEL: ${ADMIN_MIN_ACCESSLEVEL:-900}
|
|
ports:
|
|
- "8081:8080"
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
|
|
volumes:
|
|
db-data:
|
|
logs:
|
|
clanmark:
|