Documentation¶
Guides and reference for running and administering NexCTF.
Setup¶
- Deployment: production deployment, TLS, database backup and restore, scaling.
- Settings: Competition, Security, Email, Visibility, Appearance.
- Authentication: registration, login, 2FA, sessions, scoped API tokens, and OAuth2/OIDC in both directions.
- Customization: what to rebrand, in what order, and where each piece of it lives.
Content¶
- Challenges: questions, solutions, hints, files, trap flags and the AI canary.
- Pages: custom static pages (rules, sponsors, FAQ), and what the Markdown supports.
- Links: external shortcuts in the player navigation and admin sidebar.
- Files: challenge files, static assets, and public links.
- Notifications: announcements during an event.
- Scheduler: one-shot and cron jobs: challenge releases, timed announcements, nightly backups.
Administration¶
- Users & Teams: users, teams, roles, permissions.
- Events: system event log across accounts, security, and gameplay.
- Submissions: flag submission history and review.
- Feedback: player feedback on challenges.