config: sanitize tracked runtime defaults

This commit is contained in:
server
2026-04-14 09:48:39 +02:00
parent beb1a4481d
commit d81b6fda8e
3 changed files with 13 additions and 11 deletions

View File

@@ -10,6 +10,7 @@ Main runtime config examples live under:
- `share/conf/game.txt`
These files are part of the runtime tree and are required by the legacy server layout.
They now contain only bootstrap/sample values and should not be treated as usable production credentials.
## Important Security Boundary
@@ -96,6 +97,7 @@ Recommended deployment model:
- keep git-tracked `share/conf/*.txt` as bootstrap defaults only
- install `/etc/metin/metin.env` as `root:root` with mode `0600`
- point systemd at that env file via `deploy/systemd/install_systemd.py --env-file /etc/metin/metin.env`
- assume the tracked `share/conf/*.txt` values are intentionally non-production placeholders
Example: