From 4965ea2c24c7f22cd883817d3b80a3d05a5b77e9 Mon Sep 17 00:00:00 2001
From: Voyager <voyagerxyx@arrmail.net>
Date: Tue, 11 Aug 2026 22:58:53 -0400
Subject: [PATCH] Document dedicated server operators

---
 README.md                            | 37 ++++++++++++++++++++++++----
 compose.yaml                         |  1 +
 config/netfishing-server.env.example |  1 +
 config/server.cfg.example            |  3 +++
 4 files changed, 37 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 84001ef..cd0d5df 100644
--- a/README.md
+++ b/README.md
@@ -67,8 +67,34 @@ to returning players.
 Configuration is applied in this order: config file, environment variables,
 then command-line overrides. Supported command-line options are `--name`,
 `--bind`, `--port`, `--max-players`, `--data-dir`, `--discovery-url`,
-`--public`, and `--private`. Value options use `--option=value`. Keep the first
-standalone `--` shown above; it separates Godot engine flags from server flags.
+`--operators`, `--public`, and `--private`. Value options use `--option=value`.
+Keep the first standalone `--` shown above; it separates Godot engine flags
+from server flags.
+
+### Headless operators
+
+Headless moderation is granted by authenticated player identity, never by a
+display name or shared password. A player can copy their complete 64-character
+fingerprint from **Settings → Data & Identity → Copy Player Fingerprint**.
+
+Add trusted fingerprints to `/etc/netfishing-server.cfg`:
+
+```ini
+[moderation]
+operators=PackedStringArray("0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef")
+```
+
+Alternatively, provide a comma-separated list through
+`NETFISHING_SERVER_OPERATORS` or `--operators=fingerprint1,fingerprint2`.
+Configuration file values are overridden by the environment, then by the
+command line. Restart the server after changing the allowlist.
+
+The server grants operator status only after the connecting player proves
+ownership of that exact identity key. Operators can kick, ban, unban, and clear
+shared session artwork through the in-game Players page. They cannot grant
+operator access, revoke another operator, or moderate another operator. Keep
+the server data directory persistent because it owns the server identity and
+stored bans.
 
 Public listing requires the discovery URL and a publicly reachable ENet UDP
 port. Discovery makes a server findable but does not relay gameplay traffic.
@@ -103,9 +129,10 @@ docker compose up -d
 ```
 
 Set values such as `NETFISHING_SERVER_NAME`, `NETFISHING_SERVER_PORT`,
-`NETFISHING_SERVER_MAX_PLAYERS`, and `NETFISHING_SERVER_PUBLIC` in a local
-`.env` file. The Compose service runs without Linux capabilities, uses a
-read-only root filesystem, and stores persistent state in a named volume.
+`NETFISHING_SERVER_MAX_PLAYERS`, `NETFISHING_SERVER_PUBLIC`, and the optional
+comma-separated `NETFISHING_SERVER_OPERATORS` in a local `.env` file. The
+Compose service runs without Linux capabilities, uses a read-only root
+filesystem, and stores persistent state in a named volume.
 
 ## Steam distribution
 
diff --git a/compose.yaml b/compose.yaml
index 731d58a..413342c 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -18,6 +18,7 @@ services:
       NETFISHING_SERVER_PUBLIC: "${NETFISHING_SERVER_PUBLIC:-false}"
       NETFISHING_DISCOVERY_URL: "${NETFISHING_DISCOVERY_URL:-https://discovery.netfishing.org}"
       NETFISHING_DATA_DIR: /var/lib/netfishing-server
+      NETFISHING_SERVER_OPERATORS: "${NETFISHING_SERVER_OPERATORS:-}"
     volumes:
       - netfishing-server-data:/var/lib/netfishing-server
     tmpfs:
diff --git a/config/netfishing-server.env.example b/config/netfishing-server.env.example
index 43eac1e..78d7c16 100644
--- a/config/netfishing-server.env.example
+++ b/config/netfishing-server.env.example
@@ -5,3 +5,4 @@ NETFISHING_SERVER_MAX_PLAYERS=8
 NETFISHING_SERVER_PUBLIC=false
 NETFISHING_DISCOVERY_URL=https://discovery.netfishing.org
 NETFISHING_DATA_DIR=/var/lib/netfishing-server
+NETFISHING_SERVER_OPERATORS=
diff --git a/config/server.cfg.example b/config/server.cfg.example
index a807b6a..2567cf1 100644
--- a/config/server.cfg.example
+++ b/config/server.cfg.example
@@ -8,3 +8,6 @@ data_directory="/var/lib/netfishing-server"
 
 [discovery]
 url="https://discovery.netfishing.org"
+
+[moderation]
+operators=PackedStringArray()