7 Commits

Include renames

• new era
  Aryan Singh 2026-10-05 18:34:53 -05:00
  3e24d4a7bb
• Pin Minecraft 26.3 and add safe Orion managed deployment support
  Aryan Singh 2026-09-29 20:02:31 -05:00
  008120dbad
• Add TCPShield / Proxy Protocol support

  Adds enforced Proxy Protocol config and docs: a patch-set (config/patches/patch-set.json) that enables proxy protocol, whitelists TCPShield, and sets proxy/direct IPs; exposes PATCH_DEFINITIONS and mounts ./config/patches in docker-compose.yml; adds a featured "Proxy Protocol Support" entry to the dashboard mods page; and adds docs/tcpshield.md describing setup, verification, security model, and first-boot behavior.

  Aryan Singh 2026-07-11 18:51:27 -05:00
  dff2b5a9c4
• Whitelist by offline UUID: write whitelist.json directly, not 'whitelist add'

  The vanilla command resolves never-seen names through Mojang's API, so a
  premium account's UUID gets whitelisted instead of the offline UUID the
  player actually connects with — the exact 'You are not white-listed'
  loop hit on first join. The panel now computes the offline UUID
  (md5 OfflinePlayer:<name>, UUID v3 — verified against known vectors),
  writes whitelist.json itself, and issues 'whitelist reload'.
  
  Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

  Aryan SinghandClaude Fable 5 2026-07-10 18:25:28 -05:00
  4fe304c5af
• Disable enforce-secure-profile so offline-launcher players can join

  EasyAuth flagged it at startup: with enforce-secure-profile on (vanilla
  default), TLauncher/offline clients are rejected before they can even
  authenticate. Set ENFORCE_SECURE_PROFILE=FALSE on the mc service and
  document the symptom in troubleshooting.
  
  Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

  Aryan SinghandClaude Fable 5 2026-07-10 12:34:02 -05:00
  85414391b0
• Allow beta-typed Modrinth builds for EasyAuth (easyauth:beta)

  EasyAuth publishes its 26.x builds as beta on Modrinth, and the itzg
  resolver only accepts release-typed versions by default, so the mc
  container failed to start. Pin easyauth:beta in the default mod list and
  teach the panel's mod manager to compare entries by base slug so version
  qualifiers don't break protected/duplicate checks.
  
  Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

  Aryan SinghandClaude Fable 5 2026-07-10 12:26:33 -05:00
  795c2af50b
• Minecraft 26.2 Fabric server stack with CraftDeck management panel

  - docker-compose: itzg/minecraft-server (Fabric, offline mode, whitelist
    enforced, Modrinth-managed mods), itzg/mc-backup sidecar, custom dashboard
  - Gated auth for offline mode: approve username -> whitelisted with a short
    registration window -> EasyAuth /register + /login; auto-revoke on expiry
  - CraftDeck panel (Next.js 16, zero native deps): live console (SSE), players
    & stats, lag diagnostics (server TPS vs player ping via spark), performance
    graphs, Modrinth mod search/manager, backups & restore, sandboxed file
    browser/editor, .env config editor with compose apply, cron schedules,
    Discord alerts, scrypt-hashed panel login
  - scripts/setup.sh generates secrets; docs/ covers auth, mods, updating,
    backups, networking (Tailscale), troubleshooting
  
  Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

  Aryan SinghandClaude Fable 5 2026-07-10 11:07:07 -05:00
  279d137ce5