87 lines
2.8 KiB
Markdown
87 lines
2.8 KiB
Markdown
# Masterprompt Gap-Analyse — HexaHost GameCloud
|
||
|
||
Stand: 2026-07-05 (Sprint 1–3 abgeschlossen)
|
||
|
||
Vergleich mit `HexaHost_GameCloud_Cursor_Masterprompt.md`. Legende: ✅ erledigt · 🟡 teilweise · ❌ offen · 🔜 Post-MVP
|
||
|
||
---
|
||
|
||
## Zusammenfassung
|
||
|
||
| Bereich | Status |
|
||
|---------|--------|
|
||
| Auth, 2FA, Sessions, CSRF | ✅ |
|
||
| Server-Lifecycle, Queue, Multi-Node | ✅ |
|
||
| Console, Files, Properties, Worlds, Backups | ✅ |
|
||
| Add-ons (Modrinth), Catalog | ✅ |
|
||
| Billing / Idle-Stop / Credits | ✅ |
|
||
| WHMCS Integration + mTLS + Actions | ✅ |
|
||
| Members, Schedules, Players, Software-Reinstall | ✅ |
|
||
| Notifications (In-App, E-Mail, Webhook, Discord) | ✅ |
|
||
| Organizations, Support, Abuse | ✅ |
|
||
| Compliance (Export, Deletion) | ✅ |
|
||
| Feature Flags, Idempotency, OIDC, OTel | ✅ |
|
||
| Radix UI, E2E, apps/docs | ✅ |
|
||
| DB-Migration Gap-Closure | ✅ (SQL vorhanden) |
|
||
|
||
---
|
||
|
||
## 30. Abgeschlossene Sprint-Prioritäten
|
||
|
||
### Sprint 1 (Gap-Closure)
|
||
Login-Fix, CSRF, Admin-UI, öffentliche Seiten, Permissions, Server-State, WHMCS Renew/SSO, Deploy-Stubs, 25 Ops-Docs, Container-Härtung Node-Agent.
|
||
|
||
### Sprint 2 (Feature-Completion)
|
||
Datei-Upload/Archiv, Spieler-Mutationen, Software-Reinstall, Schedules-API, Notifications-REST, OTel, Playwright, FeatureFlags, OIDC, CurseForge, Radix UI, apps/docs, Idempotency, WHMCS actions API.
|
||
|
||
### Sprint 3 (Hardening)
|
||
- **Members-UI** (`server-access.tsx`) an Members-API
|
||
- **Organizations / Support / Abuse** REST-Module
|
||
- **Compliance**: S3-Export, Kontolöschung mit Anonymisierung + Server-Delete-Queue
|
||
- **Cron-Parser** (API + Worker) für Schedules
|
||
- **Idempotency** global registriert
|
||
- **Feature Flag** `maintenance_mode`
|
||
- **WHMCS PHP**: Start/Stop/Restart/Backup Buttons + ApiClient
|
||
- **Worker**: Catalog-Sync (Modrinth), Notification-Dispatch (E-Mail/Webhook/Discord), Compliance-Tick
|
||
- **Migration** `20260705160000_gap_closure_tables` (40 Tabellen)
|
||
- **Security-Docs**: backup-encryption, container-hardening
|
||
- **Impressum**, erweiterte E2E-Smoke-Tests
|
||
|
||
---
|
||
|
||
## 31. Post-MVP / Produktions-Härtung
|
||
|
||
| Thema | Status |
|
||
|-------|--------|
|
||
| Kubernetes, Live-Migration | 🔜 |
|
||
| Passkeys, Werbenetzwerke | 🔜 |
|
||
| ZFS/Ceph Storage-Adapter | 🔜 |
|
||
| Backup Client-Side-Verschlüsselung | 🔜 (Bucket-SSE dokumentiert) |
|
||
| Seccomp/AppArmor Profile | 🔜 (Baseline Docker-Härtung ✅) |
|
||
| ClamAV Upload-Scan | 🔜 |
|
||
| Penetrationstest | 🔜 |
|
||
| Integration-API IP-Allowlist | 🔜 |
|
||
|
||
---
|
||
|
||
## 32. Lokales Setup
|
||
|
||
```bash
|
||
cp .env.example .env
|
||
pnpm dev:infra
|
||
pnpm db:migrate # oder pnpm db:push bei frischer DB
|
||
pnpm db:seed
|
||
pnpm bootstrap:admin -- --email admin@example.com --password 'Relation123!'
|
||
pnpm dev
|
||
```
|
||
|
||
Login: `admin@example.com` / `Relation123!`
|
||
|
||
---
|
||
|
||
## 33. Pflege-Hinweis
|
||
|
||
Bei weiteren Änderungen diese Datei und `docs/IMPLEMENTATION_STATUS.md` aktualisieren.
|
||
|
||
*Erstellt: 2026-07-05 · Sprint 3: 2026-07-05*
|