Files
firefrost-operations-manual/docs/TASKS.md
Michael Krause eb0593e7a8 Add Feb 8-9 work documentation: security hardening & Gitea migration
- Added migration log (session-gitea-migration-feb8-2026.md)
- Added comprehensive work journal (session-summary-feb8-2026.md)
- Updated TASKS.md to mark Gitea migration complete
- Documents 8+ hours of infrastructure work across 6 servers
- Zero data loss, 100% uptime maintained
2026-02-08 23:55:06 -06:00

10 KiB

Firefrost Gaming - Task List

Last Updated: February 8, 2026
Status: Active Planning & Deployment


IMMEDIATE TASKS (Next 24-48 Hours)

Testing & Verification

  • ATM10 Performance Test (NC1 Charlotte)

    • Log in-game and check TPS (should be stable 20.0)
    • Monitor for "ticks behind" warnings (should be gone)
    • Verify Java heap fix working: ps aux | grep Xmx12G on NC1
    • If fixed: Document success in architecture-decisions.md
  • Hytale Server - Mod Updates

    • Complete mod updates (in progress)
    • Test server stability after updates
    • If issue persists: Troubleshooting session with Claude

PHASE 0.5 DEPLOYMENT (Management Services on TX1)

Target: All services deploy to TX1 Dallas (38.68.14.26)
Why TX1: Massive headroom (1% RAM usage), consolidation saves complexity

Service 1/5: Gitea COMPLETED (Feb 8-9, 2026)

  • Deployed on Command Center (74.63.218.202)
  • MIGRATED: Command Center → TX1 Dallas
    • Backup Gitea data (13MB total)
    • Install Gitea on TX1 (38.68.14.26)
    • Restore data (100% integrity verified)
    • Update DNS: git.firefrostgaming.com → 38.68.14.26
    • Test functionality (HTTPS working, SSL valid)
    • Decommission Command Center instance (removed cleanly)
  • Migration Log: docs/session-gitea-migration-feb8-2026.md
  • Work Journal: docs/session-summary-feb8-2026.md (pending)

Migration Changelog (Feb 8-9, 2026):

  • Migrated 13MB data (database + repositories)
  • Zero data loss, all commits verified
  • DNS updated with ~2min propagation
  • Old instance cleanly removed
  • Total downtime: ~5 minutes

Service 2/5: Uptime Kuma (NEXT PRIORITY)

  • Install Uptime Kuma on TX1
  • Configure monitoring targets:
    • All 15 game servers (NC1 + TX1)
    • Panel (45.94.168.138)
    • Billing (38.68.14.188)
    • Ghost (64.50.188.14)
    • Command Center
    • Breezehost status page (if available)
  • Set up DNS: status.firefrostgaming.com → TX1 IP
  • Configure Discord webhook for status updates (future)
  • Test public access

Service 3/5: BookStack

  • Install BookStack on TX1
  • Initial configuration (users, permissions)
  • Set up DNS: docs.firefrostgaming.com → TX1 IP
  • Create initial structure:
    • Player guides (Fire/Frost paths)
    • Staff documentation
    • Server rules
    • Modpack information
  • Migrate any existing docs from Ghost/other sources

Service 4/5: Netdata

  • Install Netdata on TX1
  • Configure monitoring for:
    • TX1 system resources
    • NC1 system resources (remote monitoring)
    • Command Center resources
  • Set up DNS: analytics.firefrostgaming.com → TX1 IP
  • Configure alerts/thresholds
  • Secure access (authentication)

Service 5/5: Vaultwarden

  • Install Vaultwarden on TX1
  • Configure secure password storage
  • Set up DNS: vault.firefrostgaming.com → TX1 IP
  • SSL/TLS configuration (critical for passwords)
  • Create admin account
  • Migrate existing passwords (if applicable)
  • Staff onboarding documentation

STAFF RECRUITMENT (Tonight - Expand Planning)

Decision Making (TONIGHT)

  • DECIDE: Compensation Model

    • Pure volunteer?
    • Profit-sharing (when revenue hits $X/month)?
    • Hybrid (volunteer → profit-sharing after threshold)?
    • Document final decision in staff-recruitment-planning.md
  • DECIDE: Profit-Sharing Structure (if applicable)

    • Revenue threshold to trigger profit-sharing
    • Percentage allocation per role
    • Legal agreements needed? (contracts, NDAs)
    • Tracking system for contributions

Recruitment Post Creation

  • Builder Recruitment Post

    • Who we are (Firefrost Gaming overview)
    • What we need (spawn area designers for 13+ modpacks)
    • What we offer (compensation, creative freedom, credits)
    • Skills required (Minecraft building, modded knowledge)
    • How to apply (Discord? Form? Email?)
  • Social Media Manager Recruitment Post

    • Support Meg with content creation
    • Fire/Frost brand voice understanding
    • Platforms: Discord, Twitter/X, Reddit, Instagram, TikTok
    • Time commitment estimate
    • Compensation structure

Channel Research & Posting

  • Research best Discord communities for recruitment
  • Draft Reddit posts (r/feedthebeast, r/MinecraftBuilds, etc.)
  • Create application process (Google Form? Discord form?)
  • Set up vetting/interview process
  • Post recruitment ads across channels

Timeline Planning

  • When do we need staff in place? (Before Fire/Frost launch?)
  • Application review schedule
  • Interview timeline
  • Onboarding plan (what access, training, tools)

FROSTWALL PROTOCOL (Future - Post Phase 0.5)

Context: Dismantled in Phase 0, will rebuild correctly after management services deployed

Architecture Design

  • Finalize Cloudflare configuration strategy

    • DDoS protection settings
    • Rate limiting rules
    • DNS proxy configuration
  • Design GRE tunnel topology

    • Command Center → NC1 (Charlotte)
    • Command Center → TX1 (Dallas)
    • IP assignments for tunnel interfaces
    • MTU calculations (1476 for GRE)
  • Backend server hardening

    • Firewall rules: ONLY accept GRE from Command Center
    • Drop all other traffic to real IPs
    • Test isolation (real IPs cannot be reached publicly)

Implementation

  • Configure Cloudflare for game.firefrostgaming.com
  • Set up GRE tunnels on Command Center
  • Configure NC1 to accept only tunnel traffic
  • Configure TX1 to accept only tunnel traffic
  • Test traffic flow: Cloudflare → Command Center → Tunnels → Servers
  • Verify real IPs hidden (cannot connect directly)
  • Performance testing (latency, packet loss)
  • Document final configuration

Security Verification

  • Scan real IPs from external network (should timeout)
  • Verify game traffic only flows through Command Center
  • Test DDoS mitigation (Cloudflare layer)
  • Confirm staff cannot see real backend IPs (if policy)

FIRE/FROST LAUNCH PREPARATION

Discord Server Setup

  • Create Discord server structure (15 channels per path)
  • Configure roles (Awakened, Elemental, Primal, Sovereign, Legend)
  • Set up Fire Path channels
  • Set up Frost Path channels
  • Shared spaces configuration
  • Bot integration (payment verification, role assignment)

Payment Integration

  • Paymenter configuration for Fire/Frost tiers
  • $1 Awakened gateway setup
  • Subscription tier pricing ($5, $10, $15, $20/month)
  • $499 Sovereign lifetime implementation
  • Discord role automation (payment → role assignment)
  • Test payment flow end-to-end

Server Configuration

  • LuckPerms setup (permission hierarchy for 13+ servers)
  • Test permission inheritance
  • Verify Fire vs Frost permission separation
  • Cross-server chat configuration (if desired)
  • Spawn area designs (waiting on builders)

Marketing & Launch

  • Website content (firefrostgaming.com)
  • Social media accounts setup
  • Launch announcement schedule
  • Content calendar (first 30 days)
  • Community building strategy
  • Influencer outreach? (if applicable)

ONGOING MAINTENANCE

Weekly Tasks

  • Review server performance (Netdata/Uptime Kuma)
  • Check for security updates (all VPS + dedis)
  • Backup critical data (Gitea repos, BookStack content, Vaultwarden)
  • Monitor subscription revenue (when launched)
  • Community moderation check
  • Staff check-ins (when hired)

Monthly Tasks

  • Full infrastructure audit
  • Breezehost invoice review (align to 1st of month)
  • Capacity planning (game server load)
  • Staff performance reviews (when applicable)
  • Content review (BookStack, Ghost CMS)
  • Financial review (revenue vs costs)

Quarterly Tasks

  • Disaster recovery test (failover to Ghost VPS?)
  • Security audit
  • Backup restoration test
  • Infrastructure optimization review
  • Staff profit-sharing distribution (if applicable)

TECHNICAL DEBT / FUTURE IMPROVEMENTS

System Updates Needed

  • NC1 Charlotte: 12 updates pending, system restart required
  • Panel VPS: 118 updates pending, 2 security updates
  • Ghost VPS: System restart required
  • Review ESM Apps for additional security updates

Documentation Gaps

  • Create full infrastructure manifest (merge with architecture-decisions.md)
  • Document all DNS records (Cloudflare)
  • Emergency procedures guide
  • Staff onboarding documentation
  • Player onboarding guides (Fire/Frost specific)

Optimization Opportunities

  • Review other Java servers for heap misconfiguration (like ATM10 was)
  • Consolidate billing? (all to 1st of month - requested, pending Brandon)
  • Evaluate: Can we consolidate Panel + Billing VPS? (both small, 1 vCPU)
  • Future: Upgrade Command Center to Cloud-4 if Frostwall needs more power?

PARKING LOT (Ideas to Revisit)

  • Multi-game expansion (Hytale, FoundryVTT already running - what else?)
  • Reseller partnership with Breezehost (when "very successful")
  • Email migration (Plesk → Zoho/Mailgun) - mentioned in provider docs
  • Additional geographic locations (west coast, international)
  • Scaling to 20-25 game instances per dedi (we have headroom)
  • Ghost CMS content strategy (marketing site)
  • TheNerdsmiths.com integration? (separate brand or merged?)

NOTES

Current Infrastructure Cost: $207/month
Current Game Servers: 15 instances (13+ different modpacks)
Current Capacity Usage: ~40% of conservative capacity (room for 23-33 MORE instances)
Session Reset: ~7:00 PM tonight (2hr 50min from now)

Priority Order (Recommended):

  1. Test ATM10 fix (verify success)
  2. Complete Hytale mod updates
  3. Staff recruitment decisions (tonight)
  4. Deploy Uptime Kuma on TX1 (next Claude session)
  5. Continue Phase 0.5 deployment
  6. Staff recruitment posting
  7. Frostwall rebuild (after management services stable)
  8. Fire/Frost launch prep

Last Updated: February 8, 2026, 4:10 PM CST