docs: add server runtime audit #1

jann · 2026-04-14T13:37:19+02:00

jann commented

2026-04-14 13:37:19 +02:00

Ground-truth snapshot of what the VPS is actually running, versus what the existing docs/debian-runtime.md says it should be running. Source is a read-only recon session today (2026-04-14).

Main findings

Only db (PID 1788997, port 9000) is alive. None of game_auth, channel1_core1..3, channel99_core1 are running — and more importantly their binaries are not present in share/bin/ on the VPS at all. Deploy pipeline that drops per-instance binaries into channels/<ch>/<core>/<instance> has not been run.
metin-db.service is currently flapping (deactivating (stop-sigterm) in systemctl). Two fresh 97 MB core dumps in channels/db/ from 13:24 and 13:25 today. syserr.log full of CPeerBase::Recv() Connection reset by peer even though nothing should be connecting.
channels/db/VERSION.txt reports db revision: b2b037f-dirty — build was from a dirty tree.
db binds 0.0.0.0:9000, not 127.0.0.1. Should probably be locked down to loopback unless Contabo firewall rules already block it.
Secrets contract: share/conf/db.txt / game.txt contain bootstrap / change-me placeholders; real values come from /etc/metin/metin.env (root:root 600). Which env var names the source actually reads is still unverified.
Systemd orchestration is confirmed clean: metin-server umbrella → metin-db → metin-db-ready (wait-port helper) → metin-auth + metin-game@*. The old start.py / stop.py in the repo are FreeBSD-legacy, not wired in.

What the PR adds

docs/server-runtime.md — full engineer-to-engineer writeup: processes, systemd units, config files, DB, logging, ports, data layout, disk usage, "how to restart channel1_core2 cleanly", and an open-questions list.
docs/server-topology.md — ASCII diagram of the intended architecture plus a table of every process, its unit, ports, role and config file.

Notes

Read-only audit: no services restarted, no files changed on the VPS, no SQL executed.
Complements the existing docs/debian-runtime.md / docs/database-bootstrap.md / docs/config-and-secrets.md rather than duplicating them.

Ground-truth snapshot of what the VPS is actually running, versus what the existing `docs/debian-runtime.md` says it should be running. Source is a read-only recon session today (2026-04-14). ## Main findings - Only `db` (PID 1788997, port 9000) is alive. None of `game_auth`, `channel1_core1..3`, `channel99_core1` are running — and more importantly **their binaries are not present in `share/bin/` on the VPS at all**. Deploy pipeline that drops per-instance binaries into `channels/<ch>/<core>/<instance>` has not been run. - `metin-db.service` is currently flapping (`deactivating (stop-sigterm)` in systemctl). Two fresh 97 MB core dumps in `channels/db/` from 13:24 and 13:25 today. `syserr.log` full of `CPeerBase::Recv() Connection reset by peer` even though nothing should be connecting. - `channels/db/VERSION.txt` reports `db revision: b2b037f-dirty` — build was from a dirty tree. - `db` binds `0.0.0.0:9000`, not `127.0.0.1`. Should probably be locked down to loopback unless Contabo firewall rules already block it. - Secrets contract: `share/conf/db.txt` / `game.txt` contain `bootstrap` / `change-me` placeholders; real values come from `/etc/metin/metin.env` (root:root 600). Which env var names the source actually reads is still unverified. - Systemd orchestration is confirmed clean: `metin-server` umbrella → `metin-db` → `metin-db-ready` (wait-port helper) → `metin-auth` + `metin-game@*`. The old `start.py` / `stop.py` in the repo are FreeBSD-legacy, not wired in. ## What the PR adds - `docs/server-runtime.md` — full engineer-to-engineer writeup: processes, systemd units, config files, DB, logging, ports, data layout, disk usage, "how to restart channel1_core2 cleanly", and an open-questions list. - `docs/server-topology.md` — ASCII diagram of the intended architecture plus a table of every process, its unit, ports, role and config file. ## Notes - Read-only audit: no services restarted, no files changed on the VPS, no SQL executed. - Complements the existing `docs/debian-runtime.md` / `docs/database-bootstrap.md` / `docs/config-and-secrets.md` rather than duplicating them.

jann added 2 commits 2026-04-14 13:37:20 +02:00

docs: add live server runtime audit 5b65928007

docs: add server topology diagram and port table f2b55949de

jann referenced this pull request

2026-04-14 15:04:31 +02:00

handoff: server down + DNS blocker + 3 PRs k merge + write access request #2

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions