Hosting question: SHA-256 release signing (#854)

This is an original write-up for OpenTibiaServers — not copied from elsewhere. Client target: 12.x/13.x OTC builds with our custom modules disabled for the repro. Map size is roughly mid-scale with custom hunting zones east of the desert. Is there a cleaner way to validate datapack XML before boot? --- FILE SHARE RULE (required): 1) Prefer hosting on a reputable mirror (GitHub Releases, your site HTTPS). 2) Every download link MUST include a VirusTotal analysis URL for that exact file hash. 3) Paste: file name, version, SHA-256, VirusTotal link, supported client/engine, license. 4) Archives without a VirusTotal link will be removed. Example VT link format: https://www.virustotal.com/gui/file/<sha256> Synthetic example package: ots-community-tool-854.zip SHA-256: 6f74732d73796e7468657469632d66696c652d3835332d6f70656e5469626961 VirusTotal: https://www.virustotal.com/gui/file/6f74732d73796e7468657469632d66696c652d3835332d6f70656e5469626961 Note: demo hash for seed content only — replace with your real release hash before publishing.

Agree on the VirusTotal rule for binaries. Hash + VT link or it does not ship. Also: please keep the VirusTotal link next to the mirror. Example: https://www.virustotal.com/gui/file/6f74732d73796e7468657469632d66696c652d3835332d6f70656e5469626961

If you share the stacktrace (redact IPs), I can compare with our build.

Good call separating AAC auth from game auth cookies.

I would pin a status endpoint and keep Cloudflare off the game port.

Consider feature-flagging it for premium only during the first week.

For Windows hosts, mark the service recovery options or it will not auto-restart.

Try indexing the player storage lookups; it helped our spawn scripts.

We documented a similar path in our ops notes last month.