Moderators and linking

Every Chupathingy dedicated server has moderation built in, with no need for this site. Its owner gives roles on the server itself, in its moderators file, with sv_mod_add on its console, or in its own control panel.

Role	Can
Moderator	See the players, warn, kick, and ban for up to 7 days.
Admin	Everything a moderator can do, plus permanent bans, unbans, and changing the map, playlist and settings.
Owner	Everything an admin can do, plus giving and removing roles, and linking and unlinking. The server's console always has the owner role.

A server recognizes a moderator in the game by their moderator key, a public key their copy of Chupathingy derives from its player key. The player key itself never leaves the player's game except to this site, over HTTPS. A moderator signs in from the game. Legacy players can be moderated like anyone else, but moderating from inside the game requires Chupathingy.

The server's own documentation (server/README.md in the game's repository) covers the moderators file, the commands and the control panel.

Adding (linking) a server is optional. An added server shows up on your My servers page, where you and the people you give a role can see who is playing and warn, kick, ban or change the map from a phone or any browser.

• On the server's console, run sv_link. It prints a code. The code works once, for 30 minutes.
• Sign in here, open Add a server, enter the code, check the server's name and add it.
• On the server's page, give other profiles a role: moderator or admin. The games linked to their profiles then have that role on your server.

Two-step sign-in is not needed to add a server, to see it, or to have a role on one.

The server connects out to this site, so it needs no open port and works behind a home router. It checks for commands every few seconds and reports its players and map to the site. Nothing reaches the server unless its owner allowed it.

What can't be undone asks you to confirm it's you first: a ban, unlinking a server, giving someone admin, and taking a role away. Warning, kicking, changing the map and settings, and giving someone moderator don't.

• With two-step sign-in on your profile: the code from your authenticator app (or a recovery code).
• Without it: a code we email to your profile's confirmed address. It works once, for 10 minutes.

Once confirmed, you aren't asked again for 30 minutes. A profile with neither a confirmed email nor two-step sign-in can add a server and moderate it, but must add one of them before it can ban or unlink.

• Each linked server has its own key. Every request it makes is signed, and the site's answers carry a code only that server can check. Requests signed with another key, replayed requests, and requests from a clock that is far off are refused.
• Every command is checked twice: here against the sender's role, and again on the server against its own role list and its own limit on what this site may do (by default, nothing beyond admin).
• A code from the server's console is the proof of running it: it works once, runs out after 30 minutes, and wrong codes are limited.
• Bans, unlinking, giving admin and taking a role away ask for a fresh code (authenticator or email) first. That confirmation lasts 30 minutes.
• Every link, role change, command and result is in this site's audit log and in the server's own log.
• No player's or server's address is shown.
• Either side can unlink: sv_unlink on the server, or Unlink on its page here. A server can also turn linking off altogether in its settings.