Security checklist: protocol game feature flags (#2830)

Collecting practical notes so new server owners avoid the same traps. Map size is roughly mid-scale with custom hunting zones east of the desert. We keep configs in git and treat live changes as a hotfix branch. Would you accept this as a draft tutorial under Learn Track?

Good call separating AAC auth from game auth cookies.

I would pin a status endpoint and keep Cloudflare off the game port.

Consider feature-flagging it for premium only during the first week.

For Windows hosts, mark the service recovery options or it will not auto-restart.

Try indexing the player storage lookups; it helped our spawn scripts.

We documented a similar path in our ops notes last month.