Dev Team Shares 3 Critical Mistakes Made Deploying a Discord Bot in Production

A developer built a Discord bot to let trusted players restart game server containers without needing shell access, using discord.py and docker-py on a multi-game Docker host. The first major mistake was mounting the raw Docker socket into the bot container, which effectively granted the bot process passwordless root access to the entire host. The second error was failing to enforce Discord role checks or cooldowns on slash commands, allowing any guild member to trigger restarts — an oversight that caused a mid-raid server crash during a community tournament. A webhook misconfiguration later amplified the problem by looping restart commands and crashing the host entirely. The team ultimately fixed these issues by routing Docker access through a socket proxy with an explicit allowlist and adding proper role-based permission checks with cooldown logic.