Commit graph

11 commits

Author SHA1 Message Date
s8n
9565f0bf53 docs: shop system research + decision (ExcellentShop or split) 2026-05-07 22:35:28 +01:00
s8n
41ae6f90ef feat(chat): stage ChatChat migration bundle (jar + configs + swap scripts)
Replaces CarbonChat 3.0.0-beta.36 — viewer-context bug on <luckperms_prefix>.
ChatChat (HelpChat fork) renders per-recipient with sender-context PAPI +
built-in Kyorifier (& -> MM). Built from upstream main HEAD via podman/temurin 21.

Staged only — operator runs scripts/swap.sh during a quiet window. Rollback
plan + smoke checklist in docs/MIGRATION-PLAN-CHATCHAT.md. JAR gitignored;
rebuild via staging/chatchat/build/build.sh.
2026-05-07 22:23:11 +01:00
s8n
188f43d308 docs: canonical philosophy + moderation; tighten RULES
- docs/PHILOSOPHY.md: position racked.ru as leaning-anarchy with claims/homes/auth as the only QoL safety nets; explicit ARE / ARE NOT lists; explicit WILL / WON'T moderate lists
- docs/MODERATION.md: operator pledge, public ban-log, 7-day appeal window, self-imposed no-favoritism rules
- RULES.md: rewritten short-form, links to PHILOSOPHY + MODERATION for the long form

Tone: pragmatic-not-preachy per project_racked_philosophy memory; matches VIBE.md/RACKED_BRAND.md voice.
2026-05-07 19:30:10 +01:00
s8n
aad4d4e142 docs: roadmap for hard-disable alias cleanup (canonical /pm + others) 2026-05-07 19:17:07 +01:00
s8n
c4fb8c386e docs: comprehensive COMMANDS.md audit (plugin → PAT → LP)
Read-only audit of all 24 loaded plugin jars: plugin.yml extraction,
PAT whitelist diff, LP default-group export, conflict matrix, and a
curated default-player command surface with concrete add/remove diffs.
2026-05-07 19:06:03 +01:00
s8n
d25b3d2e0d docs: chat plugin research (ChatChat + VentureChat)
Carbon viewer-context bug: <luckperms_prefix> resolves against viewer
not sender. Researched two open-source alternatives.

Both fix the bug. ChatChat (HelpChat fork) renders per-recipient with
PlaceholderAPI.setPlaceholders(sender, ...) + Kyorifier converts legacy
& codes to MM. VentureChat resolves PAPI once vs sender, splits packets
via ProtocolLib.

Concerns:
- ChatChat: 0 GitHub releases, last commit 2025-04-02, apiVersion 1.21.4,
  uses deprecated AsyncPlayerChatEvent
- VentureChat: built for 1.21.8, open issues #154/#156/#157 report
  1.21.10+ breakage with no maintainer response 4+ months

Both verdicts: cautious recommend. Operator decision pending player
input + migration plan synthesis.
2026-05-07 18:53:13 +01:00
s8n
4c16cebb2b backup: phase 1 + phase 2 scripts; daily script repaired and deployed
Repairs the orphaned synapse-signing-key block at scripts/backup.sh
lines 119-122 that was exiting the script under set -e before the
Minecraft block could run, leaving 5 of the last 7 days without a
world backup and zero usable snapshots after 7-day retention.

Phase 1 (deployed today to /opt/docker/backup.sh on nullstone):
- Repaired script — orphan block removed, MC arm wrapped so failures
  in one tar don't kill the run
- tar exit code 1 ("file changed as we read it") now treated as
  success on the live MC world; spark profiler tmp file noise
  silenced via --ignore-failed-read --warning=no-file-changed
- Plugin DBs (homestead, AuthMe, CoreProtect, LuckPerms) and configs
  now backed up alongside the world
- Sentinel /opt/backups/.last-success stamped only when the world
  arm succeeds — gives outside monitors a single mtime to alert on
- Manually verified end-to-end: 12G world tarball, 492M plugins,
  279M dbs, 14 config files, sentinel updated. Pre-fix script saved
  at /opt/docker/backup.sh.bak-20260507-pre-phase1.

Phase 2 (scripts in repo, deployment pending operator sudo):
- scripts/restic-backup-playerdata.sh — Class A 5-min restic snapshots
  of playerdata/, stats/, advancements/, plugin DBs, LuckPerms;
  rcon save-all flush before snapshot; tag-scoped retention
- scripts/restic-init.sh — one-time bootstrap (root-only) for
  /etc/mc-backup.{env,pw} + repo init at /home/user/restic/
- scripts/systemd/mc-backup-playerdata.{service,timer} — 5-min timer
  with hardening (ProtectSystem=strict, ReadOnlyPaths, etc)
- docs/RUNBOOK-BACKUP-RESTORE.md updated with both phases'
  deployment steps and the operator-action checklist

Off-host mirror to onyx (Phase 4) and class B/C/D world snapshots
(Phase 3) are still TODO — see BACKUP-STRATEGY.md §11 phase plan.
2026-05-07 18:29:30 +01:00
s8n
96702116ee docs+pat: fix default-rank /help and Homestead claim flow
PAT whitelist was missing region/rg/hs/homestead/unclaim, blocking the
only entry-points to Homestead's claim flow for default players.
Added them to ProAntiTab/storage.yml on the live box and reloaded.

EssentialsX shadows /help by load-order, hiding the branded HelpCommand
page behind hide-permissionless-help. Added a help -> helpcommand:help
alias to commands.yml. Takes effect on next restart.

Lands plugin's jar is not installed (only its config dir remains);
docs explain why /lands references in HelpCommand and PAT are dead.

Adds:
- docs/DEFAULT-RANK-COMMANDS-2026-05-07.md   diagnosis + fix log
- docs/PLAYER-SMOKE-TEST.md                  regression checklist for
                                             YOU500 as the test rig
- scripts/test-default-perms.sh              snapshot dump for diffing
                                             before/after config edits
2026-05-07 18:19:26 +01:00
s8n
a1cc3940cf docs: 2026-05-07 incident audit + backup strategy
Player YOU500 lost full inventory to AuthLimbo void-death at 17:13:39.
Investigation revealed deployed /opt/docker/backup.sh is an 88-line stub
missing the Minecraft block; last successful world backup 2026-05-02
(already pruned). No recoverable .dat exists.

Files:
- AUDIT-2026-05-07.md — server-side findings F-01..F-06 (P0 backups,
  no-keepInventory, AuthLimbo silent failure, chunk preload race,
  Xmx > container headroom, container hardening gaps)
- BACKUP-HUNT-2026-05-07.md — exhaustive backup scan; only 6-week-old
  archive at _archive/minecraft-old-2026-04-27.tar.gz
- BACKUP-STRATEGY.md — restic-based plan; 5min/hourly/daily classes,
  off-host to onyx via Tailscale, monthly drill
- CROSS-REFERENCE-2026-05-07.md — repo+doc landing map; flags
  pre-existing infra/STATE.md backup-broken note + HA-CLUSTER restic
  draft to extend rather than duplicate
- docs/RUNBOOK-BACKUP-RESTORE.md — operator runbook for .dat restore,
  full-world restore, host-loss restore, drill log
2026-05-07 17:33:24 +01:00
s8n-ru
b1db453a85 chat: deep rebrand to racked.ru palette + prefix
22 plugins audited, 14 rebranded, 21 files changed. Locks player-facing
chat to monochrome + &e yellow accent with universal prefix
&8[&fracked.ru&8]&r — strips every plugin-name leak (AuthMeReloaded,
[Lands], [Homestead], [SkinsRestorer], [TAB], Grim », [ProAntiTab],
upstream Discord pitches).

Tier-1 surfaces:
- AuthMe welcome.txt: 1-line branded login (was "AuthMeReloaded
  protection!"); ~108 messages recoloured
- MiniMOTD: dead 1.16.2 config.yml deleted (salvos.ddns.net + joke
  MOTDs); main.conf already on-brand
- HelpCommand: full /help recolour, &a/&c labels purged
- ComfyWhitelist: kick screen redesigned to "apply at racked.ru"
- LPC chat-format: banned &l removed (every chat line)

Tier-2 prefix sweep across TAB, GrimAC, ProAntiTab, CoreProtect,
SkinsRestorer, MarriageMaster, Homestead, UltimateTimber.

Plugin folder rename: RackedLimbo → AuthLimbo (matches 2026-04-30
plugin rename + docker-compose update in 6487ada).

Lands lang (~6,975 lines), Homestead lang (~645 lines), and
jar-locale plugins (Multiverse, WorldEdit, FAWE, LuckPerms,
SkinsRestorer prefix) deferred — see docs/REBRAND_2026-04-30.md.

Adds canonical reference: docs/RACKED_BRAND.md (palette, wordmark,
templates, validation checklist).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-01 10:40:28 +01:00
s8n-ru
0dad38e02e Initial commit: racked.ru Minecraft server config snapshot
Captures live config state of nullstone Purpur 1.21.11 server:
- docker-compose.yml (itzg/minecraft-server image, MODRINTH_PROJECTS + PLUGINS lists)
- All plugin configs under live-server/plugins/ (no DBs, no jars, no world data)
- Server core: bukkit.yml, spigot.yml, purpur.yml, paper-global.yml, paper-world-defaults.yml, server.properties

Excluded via .gitignore:
- World data (world/, world_nether/, world_the_end/, auth_limbo/)
- Sensitive: AuthMe DB (password hashes), Lands DB, CoreProtect DB, Essentials userdata
- Jars (auto-fetched), logs, caches, .paper-remapped
2026-04-30 18:33:38 +01:00