# Moltres.Net

> Free browser games portal. Self-hosted, instant-play, zero installs.
> Built with Rust (Axum) + vanilla HTML/CSS/JS. Open source.

## About

Moltres.Net is a self-hosted web game platform. Admins upload HTML5 games as
`.zip` bundles containing `index.html`; visitors browse the catalog and
play in their browser without downloads or installs.

## Key facts

- Tech stack: Rust 1.98, Axum 0.7, Tokio, sqlx (SQLite), Argon2id auth
- Frontend: vanilla HTML5 / CSS3 / JavaScript (no build step, no framework)
- API: REST JSON at `/api/public/*` (read-only) and `/api/admin/*` (auth)
- All games run in sandboxed iframes with `allow-scripts allow-same-origin`
- Sessions: httpOnly cookies scoped to `/api`, Argon2id password hashing
- Rate-limited login: 5 failures → 15-min lockout per username

## Public routes

- `GET /` — homepage with game grid, search, categories
- `GET /play/<slug>` — game play page (sandboxed iframe)
- `GET /api/public/games?q=&category=&limit=&offset=` — JSON game list
- `GET /api/public/games/<slug>` — JSON game detail
- `GET /api/public/categories` — category list with counts
- `GET /api/public/stats` — site-wide stats
- `GET /sitemap.xml` — XML sitemap
- `GET /robots.txt` — crawler directives

## Optional

For admins: login at `/admin`, then use `/api/admin/upload` (multipart)
to upload new games and `/api/admin/games` to manage them.