Harden managed server deployment and authentication
This commit is contained in:
@@ -190,6 +190,13 @@ timeout (15 seconds), idle timeout (45 seconds) and reaper interval (15 seconds)
|
||||
Zero idle timeout disables reaping; active reaping requires a positive interval.
|
||||
Invalid options fail before creating credentials, databases or sockets.
|
||||
|
||||
Options also configure authentication burst/refill (5 attempts / one per ten seconds).
|
||||
The bounded address/account limiter runs before Argon2 and survives reconnects within
|
||||
the process, with escalating failure backoff. `Completion` reports unexpected termination
|
||||
of listener/media/active-reaper tasks; hosts should observe it and stop on failure.
|
||||
The executable supports configuration/environment, local account provisioning, JSON
|
||||
readiness, exclusive instance locking and bounded graceful shutdown; see deployment.md.
|
||||
|
||||
Authentication starts users in unprotected Lobby (id 1), subject to its capacity.
|
||||
Success returns permissions, then a cloned snapshot; peers receive joined/updated/left
|
||||
events. Server-authoritative text replaces supplied sender ids/timestamps, limits
|
||||
|
||||
Reference in New Issue
Block a user