config: sanitize tracked runtime defaults

docs/config-and-secrets.md

@@ -10,6 +10,7 @@ Main runtime config examples live under:
 - `share/conf/game.txt`
 
 These files are part of the runtime tree and are required by the legacy server layout.
+They now contain only bootstrap/sample values and should not be treated as usable production credentials.
 
 ## Important Security Boundary
 
@@ -96,6 +97,7 @@ Recommended deployment model:
 - keep git-tracked `share/conf/*.txt` as bootstrap defaults only
 - install `/etc/metin/metin.env` as `root:root` with mode `0600`
 - point systemd at that env file via `deploy/systemd/install_systemd.py --env-file /etc/metin/metin.env`
+- assume the tracked `share/conf/*.txt` values are intentionally non-production placeholders
 
 Example:
 

share/conf/db.txt

@@ -1,9 +1,9 @@
 WELCOME_MSG = "Database connector is running..."
 
-SQL_ACCOUNT 	= "127.0.0.1 account mt2 mt2@pw 0"
-SQL_PLAYER 	= "127.0.0.1 player mt2 mt2@pw 0"
-SQL_COMMON 	= "127.0.0.1 common mt2 mt2@pw 0"
-SQL_HOTBACKUP 	= "127.0.0.1 hotbackup mt2 mt2@pw 0"
+SQL_ACCOUNT 	= "127.0.0.1 account bootstrap change-me 0"
+SQL_PLAYER 	= "127.0.0.1 player bootstrap change-me 0"
+SQL_COMMON 	= "127.0.0.1 common bootstrap change-me 0"
+SQL_HOTBACKUP 	= "127.0.0.1 hotbackup bootstrap change-me 0"
 
 TABLE_POSTFIX = ""
 

share/conf/game.txt

@@ -1,15 +1,15 @@
 DB_ADDR: 127.0.0.1
 DB_PORT: 9000
-ACCOUNT_SQL: 127.0.0.1 mt2 mt2@pw account
-PLAYER_SQL: 127.0.0.1 mt2 mt2@pw player
-COMMON_SQL: 127.0.0.1 mt2 mt2@pw common
-LOG_SQL: 	127.0.0.1 mt2 mt2@pw log
+ACCOUNT_SQL: 127.0.0.1 bootstrap change-me account
+PLAYER_SQL: 127.0.0.1 bootstrap change-me player
+COMMON_SQL: 127.0.0.1 bootstrap change-me common
+LOG_SQL: 127.0.0.1 bootstrap change-me log
 TABLE_POSTFIX: 
 PASSES_PER_SEC: 60
 SAVE_EVENT_SECOND_CYCLE: 180
 PING_EVENT_SECOND_CYCLE: 180
 CHECK_MULTIHACK: 0
-ADMINPAGE_PASSWORD: metin2adminpass
+ADMINPAGE_PASSWORD:
 ADMINPAGE_IP: 127.0.0.1
 SPEEDHACK_LIMIT_COUNT: 300
 SPEEDHACK_LIMIT_BONUS: 80