Replaced literal values with env-var placeholders (${RCON_PASSWORD},
${MGMT_SECRET}, ${MC_RCON_PASSWORD}) across server.properties,
.rcon-cli.env, docker-compose.yml(s), backup scripts, and AUDIT-2026-05-07.md.
Affected secrets:
- Paper management-server-secret (HIGH; mitigated by management-server-enabled=false)
- RCON password '*redacted*' (MEDIUM; bound to 127.0.0.1)
- MC_RCON_PASSWORD backup-pipeline default fallback (MEDIUM; same blast radius)
WARNING: HEAD redaction only — values remain in git history. Treat as
compromised and rotate (closes F-17 audit-finding's deferred TODO).
Originals backed up to private s8n/secrets/minecraft-server/.
71 lines
1.7 KiB
Properties
Executable file
71 lines
1.7 KiB
Properties
Executable file
#Minecraft server properties
|
|
#Fri May 01 10:47:22 BST 2026
|
|
accepts-transfers=false
|
|
allow-flight=false
|
|
broadcast-console-to-ops=true
|
|
broadcast-rcon-to-ops=true
|
|
bug-report-link=
|
|
debug=false
|
|
difficulty=hard
|
|
enable-code-of-conduct=false
|
|
enable-jmx-monitoring=false
|
|
enable-query=false
|
|
enable-rcon=true
|
|
enable-status=true
|
|
enforce-secure-profile=true
|
|
enforce-whitelist=false
|
|
entity-broadcast-range-percentage=100
|
|
force-gamemode=false
|
|
function-permission-level=2
|
|
gamemode=survival
|
|
generate-structures=true
|
|
generator-settings={}
|
|
hardcore=false
|
|
hide-online-players=false
|
|
initial-disabled-packs=
|
|
initial-enabled-packs=vanilla
|
|
level-name=world
|
|
level-seed=8491026986654631198
|
|
level-type=minecraft\:normal
|
|
log-ips=true
|
|
management-server-allowed-origins=
|
|
management-server-enabled=false
|
|
management-server-host=localhost
|
|
management-server-port=0
|
|
management-server-secret=${MGMT_SECRET}
|
|
management-server-tls-enabled=true
|
|
management-server-tls-keystore=
|
|
management-server-tls-keystore-password=
|
|
max-chained-neighbor-updates=1000000
|
|
max-players=69
|
|
max-tick-time=-1
|
|
max-world-size=29999984
|
|
motd=racked.ru — experience the game the way it should have always been
|
|
network-compression-threshold=256
|
|
online-mode=false
|
|
op-permission-level=4
|
|
pause-when-empty-seconds=-1
|
|
player-idle-timeout=0
|
|
prevent-proxy-connections=false
|
|
query.port=25565
|
|
rate-limit=0
|
|
rcon.password=${RCON_PASSWORD}
|
|
rcon.port=25575
|
|
region-file-compression=deflate
|
|
require-resource-pack=false
|
|
resource-pack=
|
|
resource-pack-id=
|
|
resource-pack-prompt=
|
|
resource-pack-sha1=
|
|
server-ip=
|
|
server-name=Unknown Server
|
|
server-port=25565
|
|
simulation-distance=10
|
|
spawn-protection=0
|
|
status-heartbeat-interval=0
|
|
sync-chunk-writes=true
|
|
text-filtering-config=
|
|
text-filtering-version=0
|
|
use-native-transport=true
|
|
view-distance=20
|
|
white-list=false
|