Alfagun74
commented
1 week ago Hi, good idea. Though this already partly possible.
You can disable registration for anyone except admins using the SERVER_REGISTRATION_DISABLED env var.
You can also disable API Docs by using SERVER_API_DOCS_ENABLED
See https://gamevau.lt/docs/server-docs/configuration.
I will implment a configuration for disabling the web status page aswell.
Currently when the backend is served with dns the "web backend" or whatever shows a page confirming that gamevault is setup and running. I'd like to disable this as it could potentially expose the fact that the server is running to anyone that tries the domain you've exposed for the client to connect.
Basically I don't want someone to be able to know that I'm running gamevault without my explicit permission. I'd also like the ability to lock registrations to only allow an admin to create accounts rather than the current system where anyone with the web address could spam register accounts.