提交Git

target/classes/application.yml

@@ -0,0 +1,184 @@
+serverguard:
+  minecraft:
+    service-name: minecraft
+    process-name: paper-1.21.11.jar
+    jar-file: paper-1.21.11.jar
+    working-dir: /opt/minecraft
+    java-opts: -Xms4G -Xmx4G
+    check-interval-seconds: 5
+    rcon:
+      enabled: true
+      host: localhost
+      port: 25575
+      password: ${RCON_PASSWORD:}
+
+  monitor:
+    tps-threshold: 15
+    cpu-threshold: 80.0
+    memory-threshold: 85.0
+    connection-threshold: 50
+    log-watch-lines: 100
+    log-path: /opt/minecraft/logs/latest.log
+
+  alert:
+    enabled: true
+    email:
+      smtp-host: smtp.qq.com
+      smtp-port: 587
+      username: ${ALUER_ALERT_SMTP_USERNAME:}
+      password: ${ALUER_ALERT_SMTP_PASSWORD:}
+      to:
+        - ${ALUER_ALERT_EMAIL_PRIMARY:}
+        - ${ALUER_ALERT_EMAIL_SECONDARY:}
+      rate-limit:
+        per-type-seconds: 300
+        max-emails-per-minute: 10
+
+  ai:
+    enabled: true
+    use-isolation-forest: true
+    use-prediction: true
+    sliding-window-size: 100
+    anomaly-threshold: 0.7
+    prediction-horizon-minutes: 60
+    deepseek:
+      enabled: true
+      api-key: ${DEEPSEEK_API_KEY:}
+      base-url: ${DEEPSEEK_BASE_URL:https://api.deepseek.com}
+      model: ${DEEPSEEK_MODEL:deepseek-chat}
+      max-tokens: 1000
+      temperature: 0.35
+      auto-analyze-alerts: true
+      analysis-interval-seconds: 45
+      auto-execute:
+        enabled: true
+        ban-ip: true
+        kill-entity: true
+        clear-lag: true
+        set-spawn-rate: true
+        kick-player: true
+        whitelist: true
+        min-confidence: 88
+
+  security:
+    enabled: true
+    auto-ban-vpn: true
+    check-on-login: true
+    max-connections-per-ip: 3
+    block-common-exploits: true
+    log-all-commands: true
+    anti-intrusion:
+      enabled: true
+      monitor-commands: true
+      monitor-processes: true
+      monitor-files: true
+      monitor-plugins: true
+      monitor-systemd: true
+      monitor-rcon: true
+      file-integrity:
+        enabled: true
+        max-depth: 5
+    host-enforcement:
+      enabled: true
+      dry-run: true
+      preferred-backend: auto
+      default-block-minutes: 60
+      default-rate-limit-per-minute: 120
+      mirror-to-cloud-edge: true
+    cloud-edge:
+      enabled: false
+      dry-run: true
+      provider: cloudflare
+      zone-id: ${ALUER_CLOUDFLARE_ZONE_ID:}
+      api-key: ${ALUER_CLOUDFLARE_API_KEY:}
+      api-email: ${ALUER_CLOUDFLARE_EMAIL:}
+      default-block-mode: block
+      default-challenge-mode: challenge
+      enable-under-attack-on-critical: true
+    orchestration:
+      enabled: true
+      allow-local-block: true
+      allow-edge-challenge: true
+      allow-minecraft-defense: true
+      notify-on-critical: true
+    autonomy:
+      enabled: true
+      deepseek-dominant: true
+      quiet-console: true
+      loop-interval-seconds: 45
+      min-risk-score-for-action: 70
+      critical-risk-score: 90
+      workflow-cooldown-seconds: 180
+      max-actions-per-hour: 12
+      require-second-signal-for-containment: true
+    shield:
+      enabled: true
+      auto-mode: true
+      auto-enable-under-attack: true
+      heat-trigger: 78
+      resonance-trigger: 72
+      threat-score-trigger: 85
+      edge-challenge-offender-limit: 6
+      shelter-rate-limit-per-minute: 45
+      attacker-notice-enabled: true
+      deterrence-message: Your source has been identified, recorded, and isolated by Aluer.
+    kernel:
+      enabled: true
+      pulse-interval-seconds: 30
+      pulse-history-size: 180
+      journal-size: 300
+      echo-retention-minutes: 180
+      adaptive-weights: true
+      directive-heat-threshold: 60
+      lockdown-heat-threshold: 82
+    task-bus:
+      enabled: true
+      auto-dispatch: true
+      dispatch-interval-seconds: 10
+      queue-limit: 200
+      history-limit: 300
+    self-healing:
+      enabled: true
+      dry-run: true
+      loop-interval-seconds: 45
+      auto-backup-before-recovery: true
+      auto-whitelist-on-swarm: true
+      allow-soft-restart: true
+      tps-emergency-threshold: 12
+      cpu-emergency-threshold: 92.0
+      memory-emergency-threshold: 95.0
+      max-recovery-actions-per-hour: 8
+
+  dashboard:
+    enabled: true
+    title: Aluer Nebula Console
+    subtitle: PaperMC defense, recovery, and remote operations fabric
+    refresh-interval-seconds: 6
+    compact-terminal: true
+    ssh-gateway:
+      enabled: true
+      session-timeout-minutes: 30
+      max-sessions: 6
+      command-timeout-seconds: 25
+      strict-host-key-checking: false
+      allow-private-key-paste: true
+      require-engine-handshake: true
+      handshake-ttl-seconds: 30
+
+server:
+  port: 8080
+
+spring:
+  shell:
+    interactive:
+      enabled: true
+    command:
+      init:
+        delay: 0
+
+logging:
+  level:
+    root: INFO
+    com.aluer: INFO
+  file:
+    name: /var/log/serverguard.log