// the take
A C/CMake dedicated server for Atrinik, an older open-source 2D fantasy MMORPG, handling QUIC-based networking, account/password persistence, and asset delivery to game clients. This is a fork of (or mirror pointing at) the atrinik/server project rather than an independent effort, and it's for someone who wants to self-host or hack on that specific game's server internals, not a general-purpose game server framework.
Real direct-connect networking engineering: QUIC transport with PCP/NAT-PMP/UPnP mapping, peer-reflexive probing, and a bounded punch window, rather than just assuming port-forwarding. Password storage was migrated to Argon2id with a careful rehash-on-success path for legacy crypt(3)/PBKDF2 records, plus bounded memory/iteration/lane limits enforced before verification to stop a malicious record from being used as a DoS vector. Decent CI hygiene: checksum-pinned dependency fetching (SHA-256, no submodules), CTest suites with gcovr coverage, and semantic-release driving versioned container images.
Zero stars and zero forks — there's no evidence this fork has any users or community distinct from upstream atrinik/server, so it's unclear what, if anything, diverges from the original project. There's intentionally no TURN/relay fallback, so players behind symmetric NAT or without IPv6 simply cannot connect to a direct server — a real limitation, not an edge case, for anyone without a cooperative router. Running this safely puts a lot of manual secret/key hygiene on the operator (QUIC identity pem, metaserver key, join-password files all need correct permissions and backup discipline), and losing the metaserver key permanently locks you out of public listing for that identity with no recovery path described.
We read the README, the directory tree and a key source file in October 2026. Nobody pays to be listed. How we judge →