Protect the service and its players
Host security
Baseline security practices for independently operated infrastructure.
Start with the basics
- Patch the operating system and server software.
- Expose only the ports and services the host requires.
- Use separate operator accounts and strong authentication.
- Keep secrets out of public configuration and logs.
- Back up data securely and test restoration.
Be clear with players
Document what the service collects, who can access it, and how to report a problem. A .bar directory listing does not replace your own security, privacy, or moderation responsibilities.