ThomasandClaude Sonnet 5
9829688a85
New "webadmin" service (Flask + PyMySQL, port 8081) backing a small server-rendered admin UI: - Login gated on an existing game account: only accounts with accesslevel >= ADMIN_MIN_ACCESSLEVEL (default 900) get in. Password is MD5-hashed before comparison since the game client hashes it client-side before it ever hits the wire -- accounts.password is always an MD5 hex digest, confirmed against existing DB rows. - Accounts: list/search, create, edit accesslevel/active/password. - Characters: list/search, create (mirrors the real char-creation INSERT in Src/Char Server/charpackets.cpp -- only account_name, char_name, face, hairStyle, sex are set, everything else relies on the table's own defaults), edit core stats (level, zuly, attributes, hp/mp, stat/skill points) and isgm/isdev flags directly. All queries are parameterized (no string-formatted SQL). No CSRF protection or rate limiting yet -- acceptable for a small already-behind-a-high-accesslevel-gate private server, worth revisiting before ever exposing this port publicly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
44 lines
1.6 KiB
Bash
44 lines
1.6 KiB
Bash
# Copy to .env and adjust. All server settings are controlled from here -
|
|
# docker compose renders them into the .conf files at container start.
|
|
|
|
# --- Database -----------------------------------------------------------
|
|
DB_NAME=ktrose
|
|
DB_USER=rose
|
|
DB_PASSWORD=change_me
|
|
|
|
# --- Public address -------------------------------------------------------
|
|
# The address game clients connect to. For a LAN-only server this can stay
|
|
# 127.0.0.1 / the LAN IP; for an internet-exposed server this MUST be the
|
|
# public IP or DNS name of this host, otherwise clients won't be able to
|
|
# reach the char/world server after the login server hands them off.
|
|
PUBLIC_HOST=127.0.0.1
|
|
|
|
# --- Ports (published to the host) ----------------------------------------
|
|
LOGIN_PORT=29000
|
|
CHAR_PORT=29100
|
|
WORLD_PORT=29200
|
|
|
|
# --- Server / channel naming -----------------------------------------------
|
|
LOGIN_SERVER_NAME=ROSE Login
|
|
CHAR_SERVER_NAME=Server 1
|
|
WORLD_CHANNEL_NAME=Channel 1
|
|
WORLD_WELCOME_MSG=Welcome to ROSS
|
|
|
|
# --- Gameplay knobs ---------------------------------------------------------
|
|
WORLD_MAX_CONNECTIONS=500
|
|
WORLD_SAVE_TIME=3600
|
|
CHAR_DELETE_TIME=3600
|
|
LOGIN_CREATE_ACCOUNT=1
|
|
|
|
# --- Inter-server auth (must just be consistent across the 3 servers) -------
|
|
SHARED_LOGIN_PASS=789456
|
|
SHARED_CHAR_PASS=456123
|
|
SHARED_WORLD_PASS=321654
|
|
|
|
# --- Web admin panel (http://<host>:8081) -----------------------------------
|
|
# Logs in with an existing game account; only accounts with
|
|
# accesslevel >= ADMIN_MIN_ACCESSLEVEL are allowed in.
|
|
# Generate your own with: python3 -c "import secrets; print(secrets.token_hex(32))"
|
|
ADMIN_SECRET_KEY=change-me-to-a-random-value
|
|
ADMIN_MIN_ACCESSLEVEL=900
|