Aluer/target/classes/application.yml

serverguard:
  minecraft:
    service-name: minecraft
    process-name: paper-1.21.11.jar
    jar-file: paper-1.21.11.jar
    working-dir: /opt/minecraft
    java-opts: -Xms4G -Xmx4G
    check-interval-seconds: 5
    rcon:
      enabled: true
      host: localhost
      port: 25575
      password: ${RCON_PASSWORD:}

  monitor:
    tps-threshold: 15
    cpu-threshold: 80.0
    memory-threshold: 85.0
    connection-threshold: 50
    log-watch-lines: 100
    log-path: /opt/minecraft/logs/latest.log

  alert:
    enabled: true
    email:
      smtp-host: smtp.qq.com
      smtp-port: 587
      username: ${ALUER_ALERT_SMTP_USERNAME:}
      password: ${ALUER_ALERT_SMTP_PASSWORD:}
      to:
        - ${ALUER_ALERT_EMAIL_PRIMARY:}
        - ${ALUER_ALERT_EMAIL_SECONDARY:}
      rate-limit:
        per-type-seconds: 300
        max-emails-per-minute: 10

  ai:
    enabled: true
    use-isolation-forest: true
    use-prediction: true
    sliding-window-size: 100
    anomaly-threshold: 0.7
    prediction-horizon-minutes: 60
    deepseek:
      enabled: true
      api-key: ${DEEPSEEK_API_KEY:}
      base-url: ${DEEPSEEK_BASE_URL:https://api.deepseek.com}
      model: ${DEEPSEEK_MODEL:deepseek-chat}
      max-tokens: 1000
      temperature: 0.35
      auto-analyze-alerts: true
      analysis-interval-seconds: 45
      auto-execute:
        enabled: true
        ban-ip: true
        kill-entity: true
        clear-lag: true
        set-spawn-rate: true
        kick-player: true
        whitelist: true
        min-confidence: 88

  security:
    enabled: true
    auto-ban-vpn: true
    check-on-login: true
    max-connections-per-ip: 3
    block-common-exploits: true
    log-all-commands: true
    anti-intrusion:
      enabled: true
      monitor-commands: true
      monitor-processes: true
      monitor-files: true
      monitor-plugins: true
      monitor-systemd: true
      monitor-rcon: true
      file-integrity:
        enabled: true
        max-depth: 5
    host-enforcement:
      enabled: true
      dry-run: true
      preferred-backend: auto
      default-block-minutes: 60
      default-rate-limit-per-minute: 120
      mirror-to-cloud-edge: true
    cloud-edge:
      enabled: false
      dry-run: true
      provider: cloudflare
      zone-id: ${ALUER_CLOUDFLARE_ZONE_ID:}
      api-key: ${ALUER_CLOUDFLARE_API_KEY:}
      api-email: ${ALUER_CLOUDFLARE_EMAIL:}
      default-block-mode: block
      default-challenge-mode: challenge
      enable-under-attack-on-critical: true
    orchestration:
      enabled: true
      allow-local-block: true
      allow-edge-challenge: true
      allow-minecraft-defense: true
      notify-on-critical: true
    autonomy:
      enabled: true
      deepseek-dominant: true
      quiet-console: true
      loop-interval-seconds: 45
      min-risk-score-for-action: 70
      critical-risk-score: 90
      workflow-cooldown-seconds: 180
      max-actions-per-hour: 12
      require-second-signal-for-containment: true
    shield:
      enabled: true
      auto-mode: true
      auto-enable-under-attack: true
      heat-trigger: 78
      resonance-trigger: 72
      threat-score-trigger: 85
      edge-challenge-offender-limit: 6
      shelter-rate-limit-per-minute: 45
      attacker-notice-enabled: true
      deterrence-message: Your source has been identified, recorded, and isolated by Aluer.
    kernel:
      enabled: true
      pulse-interval-seconds: 30
      pulse-history-size: 180
      journal-size: 300
      echo-retention-minutes: 180
      adaptive-weights: true
      directive-heat-threshold: 60
      lockdown-heat-threshold: 82
    task-bus:
      enabled: true
      auto-dispatch: true
      dispatch-interval-seconds: 10
      queue-limit: 200
      history-limit: 300
    self-healing:
      enabled: true
      dry-run: true
      loop-interval-seconds: 45
      auto-backup-before-recovery: true
      auto-whitelist-on-swarm: true
      allow-soft-restart: true
      tps-emergency-threshold: 12
      cpu-emergency-threshold: 92.0
      memory-emergency-threshold: 95.0
      max-recovery-actions-per-hour: 8

  dashboard:
    enabled: true
    title: Aluer Nebula Console
    subtitle: PaperMC defense, recovery, and remote operations fabric
    refresh-interval-seconds: 6
    compact-terminal: true
    ssh-gateway:
      enabled: true
      session-timeout-minutes: 30
      max-sessions: 6
      command-timeout-seconds: 25
      strict-host-key-checking: false
      allow-private-key-paste: true
      require-engine-handshake: true
      handshake-ttl-seconds: 30

  webhook:
    enabled: false
    discord-url: ${ALUER_WEBHOOK_DISCORD:}
    slack-url: ${ALUER_WEBHOOK_SLACK:}

  report:
    dir: ./reports

server:
  port: 8080

spring:
  shell:
    interactive:
      enabled: true
    command:
      init:
        delay: 0

logging:
  level:
    root: INFO
    com.aluer: INFO
  file:
    name: /var/log/serverguard.log