mirror of
https://github.com/AuthMe/AuthMeReloaded.git
synced 2024-08-30 17:19:34 +02:00
* Finally kill removePassword option * Cleanup * Cleanup * Cleanup * Cleanup * Final Cleanup * Fix compile warning * Revert "Cleanup"
571 lines
22 KiB
YAML
571 lines
22 KiB
YAML
# =======================================================================================================
|
|
# _____ __ .__ _____ __________ .__ .___ .___
|
|
# / _ \ __ ___/ |_| |__ / \ ____\______ \ ____ | | _________ __| _/____ __| _/
|
|
# / /_\ \| | \ __| | \ / \ / \_/ __ \| __/ __ \| | / _ \__ \ / __ _/ __ \ / __ |
|
|
# / | | | /| | | Y / Y \ ___/| | \ ___/| |_( <_> / __ \/ /_/ \ ___// /_/ |
|
|
# \____|__ |____/ |__| |___| \____|__ /\___ |____|_ /\___ |____/\____(____ \____ |\___ \____ |
|
|
# \/ \/ \/ \/ \/ \/ \/ \/ \/ \/
|
|
#
|
|
# =======================================================================================================
|
|
#
|
|
# Authme Main Configuration File.
|
|
#
|
|
# =======================================================================================================
|
|
|
|
# Plugin infos (overwritten on start, just a simple way to find out your plugin version).
|
|
authors: ${pluginAuthors}
|
|
version: ${project.version}
|
|
buildNumber: ${buildNumber}
|
|
|
|
# Set this setting to true when you have configured the plugin,
|
|
# when false the server will be stopped with a warning message.
|
|
enabled: false
|
|
|
|
# Database settings.
|
|
data_source:
|
|
# ===========================
|
|
# Database general settings.
|
|
# ===========================
|
|
|
|
# Database backend (sqlite, mysql).
|
|
backend: sqlite
|
|
# Enable database queries caching, should improve performance.
|
|
caching: true
|
|
|
|
# ===========================
|
|
# SqLite db parameters.
|
|
# ===========================
|
|
|
|
sqlite:
|
|
# The name of the database storage file.
|
|
filename: 'authme.db'
|
|
|
|
# ===========================
|
|
# MySql db parameters.
|
|
# ===========================
|
|
|
|
mysql:
|
|
# Connection parameters.
|
|
host: '127.0.0.1'
|
|
port: 3306
|
|
username: 'change_me'
|
|
password: 'change_me'
|
|
database: 'my_minecraft_server'
|
|
tablename: 'authme'
|
|
|
|
# Column names.
|
|
column_names:
|
|
id: id
|
|
# Column for storing nicknames (ignore case nickname).
|
|
name: username
|
|
# Column for storing the realname (case sensitive nickname).
|
|
real_name: realname
|
|
# Column for storing passwords.
|
|
password: password
|
|
# Column for storing email addresses.
|
|
email: email
|
|
# Column for storing the authentication status (logged or not).
|
|
login_status: isLogged
|
|
# Column for storing player IPs.
|
|
ip: ip
|
|
# Column for storing lastlogins date and time.
|
|
last_login_timestamp: lastlogin
|
|
# Latest logout location of the players.
|
|
last_location:
|
|
world: world
|
|
x: x
|
|
y: y
|
|
z: z
|
|
# Enabled only if the bungeecord integration is activated.
|
|
server: world
|
|
|
|
# Support for registrations via WebInterfaces/CSM.
|
|
# Disable some backend caching parameters.
|
|
disableAggressiveCaching: false
|
|
|
|
# Main settings
|
|
settings:
|
|
|
|
# ===========================
|
|
# Bungeecord integration
|
|
# ===========================
|
|
|
|
bungeecord:
|
|
# Enable bungeecord integration features
|
|
enabled: true
|
|
|
|
# Server name (must be unique, please use the name in the bungeecord configuration).
|
|
# Use 'auto' for auto configuration (requires the bungeecord module).
|
|
serverName: LoginLobby1
|
|
# Keep the auth status when the player moves between servers.
|
|
# Required if you're using the bungeecord module.
|
|
keepAuthBetweenServers: true
|
|
|
|
# Target server after login
|
|
send_after_login:
|
|
enabled: false
|
|
message: ''
|
|
delay: 5
|
|
# Server name ("ServerName") or group ("G:GroupName")
|
|
# Groups are avariable only when the bungeecord module is avariable.
|
|
# If the server change fails the player will be kicked.
|
|
target: Lobby1
|
|
failKickMessage: 'Failed to connect to the lobby! Please try to join the server again!'
|
|
# Target server after logout
|
|
send_after_logout:
|
|
enabled: false
|
|
message: ''
|
|
delay: 5
|
|
# Server name ("ServerName") or group ("G:GroupName")
|
|
# Groups are avariable only when the bungeecord module is avariable.
|
|
# If the server change fails the player will be kicked.
|
|
target: LoginLobby1
|
|
failKickMessage: 'Failed to connect to the lobby! Please try to join the server again!'
|
|
|
|
# Variables:
|
|
# %p playername
|
|
bungee_commands:
|
|
player_command_after_register:
|
|
enabled: false
|
|
cmd: ''
|
|
console_command_after_register:
|
|
enabled: false
|
|
cmd: 'alert %p joined for the first time the network!'
|
|
player_command_after_login:
|
|
enabled: false
|
|
cmd: 'glist'
|
|
console_command_after_login:
|
|
enabled: false
|
|
cmd: 'alert %p logged in correctly!'
|
|
player_command_after_join:
|
|
enabled: false
|
|
cmd: ''
|
|
console_command_after_join:
|
|
enabled: false
|
|
cmd: 'alert %p joined the network!'
|
|
player_command_first_join:
|
|
enabled: false
|
|
cmd: ''
|
|
console_command_first_join:
|
|
enabled: false
|
|
cmd: 'alert %p joined for the first time the network!'
|
|
|
|
# ===========================
|
|
# Sessions configuration.
|
|
# ===========================
|
|
|
|
sessions:
|
|
# Enable sessions.
|
|
# When a player is authenticated, his IP and his nickname is saved.
|
|
# The next time the player will join the server, if his IP is the same
|
|
# of the last time, and the timeout time hasn't expired, he will be
|
|
# automatically authenticated.
|
|
enabled: false
|
|
# Session timeout.
|
|
# 0 for unlimited time (Very dangerous, use it at your own risk!)
|
|
# Consider that if player's ip has changed but the timeout hasn't
|
|
# expired, player will be kicked out of the sever!
|
|
timeout: 10
|
|
# When enabled a player's session will expire if someone tries to
|
|
# login with a different IP Address.
|
|
expire_on_ip_change: true
|
|
|
|
# ===========================
|
|
# Registration settings.
|
|
# ===========================
|
|
|
|
registration:
|
|
# After how many time unregistered players should be kicked?
|
|
# Set to 0 to disable. (default: 30)
|
|
timeout: 30
|
|
|
|
nickname:
|
|
min_length: 4
|
|
max_lenght: 16
|
|
# Regex syntax.
|
|
allowed_characters: '[a-zA-Z0-9_]*'
|
|
|
|
password:
|
|
# Enable double check of password on registration:
|
|
# /register <password> <confirmPassword>
|
|
double_check: true
|
|
# Minimum password lenght.
|
|
min_length: 5
|
|
# Regex syntax.
|
|
allowed_characters: '[\x21-\x7E]*'
|
|
# Denied unsafe passwords.
|
|
unsafePasswords:
|
|
- '123456'
|
|
- 'password'
|
|
- 'qwerty'
|
|
- '12345'
|
|
- '54321'
|
|
|
|
# ===========================
|
|
# Login settings.
|
|
# ===========================
|
|
|
|
login:
|
|
# After how many time unlogged players should be kicked?
|
|
# Set to 0 to disable. (default: 30)
|
|
timeout: 30
|
|
|
|
|
|
|
|
# ===========================
|
|
# Encryption parameters.
|
|
# ===========================
|
|
|
|
password_encryption:
|
|
# The hashing algorithm.
|
|
# Possible values: MD5, SHA1, SHA256, WHIRLPOOL, XAUTH, MD5VB, PHPBB, MYBB, IPB3,
|
|
# PHPFUSION, SMF, XENFORO, SALTED2MD5, JOOMLA, BCRYPT, WBB3, SHA512, DOUBLEMD5,
|
|
# PBKDF2, PBKDF2DJANGO, WORDPRESS, ROYALAUTH, CUSTOM (developpers only).
|
|
encryption_algorithm: SHA256
|
|
# The salt length for the SALTED2MD5 and MD5(MD5(password)+salt) algorithms.
|
|
md5_salt_length: 8
|
|
# If password check fails try all the other hash algorithm.
|
|
# AuthMe will update the password to the new passwordHash.
|
|
enable_convertion: false
|
|
|
|
# ===========================
|
|
# Unlogged user restrictions.
|
|
# ===========================
|
|
|
|
unlogged_restrictions:
|
|
# Deny chat messages send for unlogged users.
|
|
deny_chat: true
|
|
# Hide chat to unlogged users.
|
|
# Only player messages, plugins will be able to send messages to the player anyway.
|
|
hide_chat: false
|
|
|
|
# Deny any command message not in the whitelist below.
|
|
deny_commands: true
|
|
command_whitelist:
|
|
- /login
|
|
- /register
|
|
- /l
|
|
- /reg
|
|
- /email
|
|
- /captcha
|
|
|
|
movements:
|
|
# Restrict player movements.
|
|
restrict: true
|
|
# Allowed radius.
|
|
allowed_radius: 0
|
|
# Should unlogged players have speed = 0?
|
|
# After the login the walking/flying speeed will be reset to the default value.
|
|
removeSpeed: true
|
|
|
|
# End is there atm xD
|
|
|
|
# This option will save the quit location of the players.
|
|
SaveQuitLocation: false
|
|
# Should not logged in players be teleported to the spawn?
|
|
# After the authentication, if SaveQuitLocation is enabled,
|
|
# they will be teleported back to their normal position.
|
|
teleportUnAuthedToSpawn: false
|
|
|
|
# If enabled, after the login, if the ForceSpawnOnTheseWorlds setting contains
|
|
# the player's world, he will be teleported to the world spawnpoint.
|
|
# The quit location of the player will be overwritten.
|
|
# This is different from "teleportUnAuthedToSpawn" that teleports player
|
|
# back to his quit location after the authentication.
|
|
ForceSpawnLocOnJoinEnabled: false
|
|
# WorldNames where we need to force the spawn location
|
|
# Warning: This setting is Case Sensitive!
|
|
ForceSpawnOnTheseWorlds:
|
|
- world
|
|
- world_nether
|
|
- world_the_end
|
|
|
|
# this is very important options,
|
|
# every time player join the server,
|
|
# if they are registered, AuthMe will switch him
|
|
# to unLoggedInGroup, this
|
|
# should prevent all major exploit.
|
|
# So you can set up on your Permission Plugin
|
|
# this special group with 0 permissions, or permissions to chat,
|
|
# or permission to
|
|
# send private message or all other perms that you want,
|
|
# the better way is to set up
|
|
# this group with few permissions,
|
|
# so if player try to exploit some account,
|
|
# they can
|
|
# do anything except what you set in perm Group.
|
|
# After a correct logged-in player will be
|
|
# moved to his correct permissions group!
|
|
# Pay attention group name is case sensitive,
|
|
# so Admin is different from admin,
|
|
# otherwise your group will be wiped,
|
|
# and player join in default group []!
|
|
# Example unLoggedinGroup: NotLogged
|
|
unLoggedinGroup: unLoggedinGroup
|
|
|
|
# ===========================
|
|
# Address restrictions
|
|
# ===========================
|
|
|
|
# Max number of registrations per IP (default: 1)
|
|
maxRegPerIp: 1
|
|
# Maximum allowed number of Logins per IP, 0 to disable (default: 0)
|
|
maxLoginPerIp: 0
|
|
# Maximum allowed number of Joins per IP, 0 to disable (default: 0)
|
|
maxJoinPerIp: 0
|
|
|
|
# When this setting is enabled, online players can't be kicked out
|
|
# due to "Logged in from another Location"
|
|
# This setting will prevent potetial security exploits.
|
|
ForceSingleSession: true
|
|
|
|
# To activate the restricted user feature you need
|
|
# to enable this option and configure the
|
|
# AllowedRestrctedUser field.
|
|
AllowRestrictedUser: false
|
|
# The restricted user feature will kick players listed below
|
|
# if they dont match of the defined ip address.
|
|
# Example:
|
|
# AllowedRestrictedUser:
|
|
# - playername;127.0.0.1
|
|
AllowedRestrictedUser:
|
|
- playername;127.0.0.
|
|
# Ban ip when the ip is not the ip registered in database
|
|
banUnsafedIP: false
|
|
|
|
|
|
|
|
# ===============================
|
|
# Other restrictions
|
|
# ===============================
|
|
|
|
# Should we protect the player inventory before logging in?
|
|
# Warning: Requires the latest version of ProtocolLib!
|
|
ProtectInventoryBeforeLogIn: true
|
|
|
|
# Should unregistered players be kicked immediately?
|
|
kickNonRegistered: false
|
|
# Should players be kicked on wrong password?
|
|
kickOnWrongPassword: false
|
|
|
|
# Should we display all other accounts of a player when he joins?
|
|
# Required permission: authme.admin.accounts
|
|
displayOtherAccounts: true
|
|
|
|
# ===============================
|
|
# Restrictions compatibility
|
|
# ===============================
|
|
|
|
# Spawn Priority. Avariable values : authme, essentials, multiverse, default
|
|
spawnPriority: authme,essentials,multiverse,default
|
|
# AuthMe will NEVER teleport players!
|
|
noTeleport: false
|
|
|
|
GameMode:
|
|
# Do you want to set player's gamemode to survival when he joins?
|
|
# This enables also the settings below.
|
|
ForceSurvivalMode: false
|
|
# Do you want to reset player's inventory if player joins with creative mode?
|
|
ResetInventoryIfCreative: false
|
|
# Do you want to force the survival mode ONLY after the /login process?
|
|
ForceOnlyAfterLogin: false
|
|
|
|
# sgdc3: Ok, our configuration is shit.... xD Today I will stop there
|
|
|
|
|
|
registration:
|
|
# enable registration on the server?
|
|
enabled: true
|
|
# Send every X seconds a message to a player to
|
|
# remind him that he has to login/register
|
|
messageInterval: 5
|
|
# Only registered and logged in players can play.
|
|
# See restrictions for exceptions
|
|
force: true
|
|
# Does we replace password registration by an Email registration method ?
|
|
enableEmailRegistrationSystem: false
|
|
# Enable double check of email when you register
|
|
# when it's true, registration require that kind of command:
|
|
# /register <email> <confirmEmail>
|
|
doubleEmailCheck: false
|
|
# Do we force kicking player after a successful registration ?
|
|
# Do not use with login feature below
|
|
forceKickAfterRegister: false
|
|
# Does AuthMe need to enforce a /login after a successful registration ?
|
|
forceLoginAfterRegister: false
|
|
unrestrictions:
|
|
# below you can list all your account name, that
|
|
# AuthMe will ignore for registration or login, configure it
|
|
# at your own risk!! Remember that if you are going to add
|
|
# nickname with [], you have to delimit name with ' '.
|
|
# this option add compatibility with BuildCraft and some
|
|
# other mods.
|
|
# It is CaseSensitive!
|
|
UnrestrictedName: []
|
|
# Message language, available : en, de, br, cz, pl, fr, ru, hu, sk, es, zhtw, fi, zhcn, lt, it, ko, pt
|
|
messagesLanguage: en
|
|
# Force these commands after /login, without any '/', use %p for replace with player name
|
|
forceCommands: []
|
|
# Force these commands after /login as a server console, without any '/', use %p for replace with player name
|
|
forceCommandsAsConsole: []
|
|
# Force these commands after /register, without any '/', use %p for replace with player name
|
|
forceRegisterCommands: []
|
|
# Force these commands after /register as a server console, without any '/', use %p for replace with player name
|
|
forceRegisterCommandsAsConsole: []
|
|
# Do we need to display the welcome message (welcome.txt) after a register or a login?
|
|
# You can use colors in this welcome.txt + some replaced strings :
|
|
# {PLAYER} : player name, {ONLINE} : display number of online players, {MAXPLAYERS} : display server slots,
|
|
# {IP} : player ip, {LOGINS} : number of players logged, {WORLD} : player current world, {SERVER} : server name
|
|
# {VERSION} : get current bukkit version, {COUNTRY} : player country
|
|
useWelcomeMessage: true
|
|
# Do we need to broadcast the welcome message to all server or only to the player? set true for server or false for player
|
|
broadcastWelcomeMessage: false
|
|
# Do we need to delay the join/leave message to be displayed only when the player is authenticated ?
|
|
delayJoinMessage: false
|
|
removeJoinMessage: false
|
|
removeLeaveMessage: false
|
|
# Do we need to add potion effect Blinding before login/register ?
|
|
applyBlindEffect: false
|
|
ExternalBoardOptions:
|
|
# MySQL column for the salt , needed for some forum/cms support
|
|
mySQLColumnSalt: ''
|
|
# MySQL column for the group, needed for some forum/cms support
|
|
mySQLColumnGroup: ''
|
|
# -1 mean disabled. If u want that only
|
|
# activated player can login in your server
|
|
# u can put in this options the group number
|
|
# of unactivated user, needed for some forum/cms support
|
|
nonActivedUserGroup: -1
|
|
# Other MySQL columns where we need to put the Username (case sensitive)
|
|
mySQLOtherUsernameColumns: []
|
|
# How much Log to Round needed in BCrypt(do not change it if you do not know what's your doing)
|
|
bCryptLog2Round: 10
|
|
# phpBB prefix defined during phpbb installation process
|
|
phpbbTablePrefix: 'phpbb_'
|
|
# phpBB activated group id , 2 is default registered group defined by phpbb
|
|
phpbbActivatedGroupId: 2
|
|
# WordPress prefix defined during WordPress installation process
|
|
wordpressTablePrefix: 'wp_'
|
|
permission:
|
|
# Take care with this options, if you dont want
|
|
# to use Vault and Group Switching of
|
|
# AuthMe for unloggedIn players put true
|
|
# below, default is false.
|
|
EnablePermissionCheck: false
|
|
BackupSystem:
|
|
# Enable or Disable Automatic Backup
|
|
ActivateBackup: false
|
|
# set Backup at every start of Server
|
|
OnServerStart: false
|
|
# set Backup at every stop of Server
|
|
OnServerStop: true
|
|
# Windows only mysql installation Path
|
|
MysqlWindowsPath: 'C:\\Program Files\\MySQL\\MySQL Server 5.1\\'
|
|
Security:
|
|
SQLProblem:
|
|
# Stop the server if we can't contact the sql database
|
|
# Take care with this, if you set that to false,
|
|
# AuthMe automatically disable and the server is not protected!
|
|
stopServer: true
|
|
ReloadCommand:
|
|
# /reload support
|
|
useReloadCommandSupport: true
|
|
console:
|
|
# Remove spam console
|
|
noConsoleSpam: false
|
|
captcha:
|
|
# Player need to put a captcha when he fails too lot the password
|
|
useCaptcha: false
|
|
# Max allowed tries before request a captcha
|
|
maxLoginTry: 5
|
|
# Captcha length
|
|
captchaLength: 5
|
|
Converter:
|
|
Rakamak:
|
|
# Rakamak file name
|
|
fileName: users.rak
|
|
# Rakamak use ip ?
|
|
useIP: false
|
|
# IP file name for rakamak
|
|
ipFileName: UsersIp.rak
|
|
CrazyLogin:
|
|
# CrazyLogin database file
|
|
fileName: accounts.db
|
|
Email:
|
|
# Email SMTP server host
|
|
mailSMTP: smtp.gmail.com
|
|
# Email SMTP server port
|
|
mailPort: 465
|
|
# Email account that send the mail
|
|
mailAccount: ''
|
|
# Email account password
|
|
mailPassword: ''
|
|
# Custom SenderName, that replace the mailAccount name in the email
|
|
mailSenderName: ''
|
|
# Random password length
|
|
RecoveryPasswordLength: 8
|
|
# Email subject of password get
|
|
mailSubject: 'Your new AuthMe Password'
|
|
# Email text here
|
|
mailText: 'Dear <playername>, <br /><br /> This is your new AuthMe password for the server <br /><br /> <servername> : <br /><br /> <generatedpass><br /><br />Do not forget to change password after login! <br /> /changepassword <generatedpass> newPassword'
|
|
# Like maxRegPerIp but with email
|
|
maxRegPerEmail: 1
|
|
# Recall players to add an email ?
|
|
recallPlayers: false
|
|
# Delay in minute for the recall scheduler
|
|
delayRecall: 5
|
|
# Blacklist these domains for emails
|
|
emailBlacklisted:
|
|
- 10minutemail.com
|
|
# WhiteList only these domains for emails
|
|
emailWhitelisted: []
|
|
# Do we need to send new password draw in an image ?
|
|
generateImage: false
|
|
Hooks:
|
|
# Do we need to hook with multiverse for spawn checking?
|
|
multiverse: true
|
|
# Do we need to hook with BungeeCord for get the real Player ip ?
|
|
bungeecord: false
|
|
# Do we need to disable Essentials SocialSpy on join ?
|
|
disableSocialSpy: true
|
|
# Do we need to force /motd Essentials command on join ?
|
|
useEssentialsMotd: false
|
|
# Do we need to cache custom Attributes ?
|
|
customAttributes: false
|
|
Purge:
|
|
# On Enable , does AuthMe need to purge automatically old accounts unused ?
|
|
useAutoPurge: false
|
|
# Number of Days an account become Unused
|
|
daysBeforeRemovePlayer: 60
|
|
# Do we need to remove the player.dat file during purge process ?
|
|
removePlayerDat: false
|
|
# Do we need to remove the Essentials/users/player.yml file during purge process ?
|
|
removeEssentialsFile: false
|
|
# World where are players.dat stores
|
|
defaultWorld: 'world'
|
|
# Do we need to remove LimitedCreative/inventories/player.yml , player_creative.yml files during purge process ?
|
|
removeLimitedCreativesInventories: false
|
|
# Do we need to remove the AntiXRayData/PlayerData/player file during purge process ?
|
|
removeAntiXRayFile: false
|
|
# Do we need to remove permissions ?
|
|
removePermissions: false
|
|
Protection:
|
|
# Enable some servers protection ( country based login, antibot )
|
|
enableProtection: false
|
|
# Countries allowed to join the server and register, see http://dev.bukkit.org/bukkit-plugins/authme-reloaded/pages/countries-codes/ for countries' codes
|
|
countries:
|
|
- US
|
|
- GB
|
|
# Countries blacklisted automatically ( without any needed to enable protection )
|
|
countriesBlacklist:
|
|
- A1
|
|
# Do we need to enable automatic antibot system?
|
|
enableAntiBot: false
|
|
# Max number of player allowed to login in 5 secs before enable AntiBot system automatically
|
|
antiBotSensibility: 5
|
|
# Duration in minutes of the antibot automatic system
|
|
antiBotDuration: 10
|
|
VeryGames:
|
|
# These features are only available on VeryGames Server Provider
|
|
enableIpCheck: false
|