version: "1.1.14-SNAPSHOT (git-4023a45)"
# Available serializers:
# LEGACY_AMPERSAND - "&c&lExample &c&9Text".
# LEGACY_SECTION - "§c§lExample §c§9Text".
# MINIMESSAGE - "<bold><red>Example</red> <blue>Text</blue></bold>". (
MiniMessageViewer)
# GSON - "[{"text":"Example","bold":true,"color":"red"},{"text":" ","bold":true},{"text":"Text","bold":true,"color":"blue"}]". (
JSON Text Generator)
# GSON_COLOR_DOWNSAMPLING - Same as GSON, but uses downsampling.
serializer: LEGACY_AMPERSAND
prefix: "אCCᴀڑCAᴜ»AC8ᴛA73C6ʜC6BC3ᴏE64C1ʀÍDBFɪ࡬BDᴢêFBBᴀ৴B9ᴛ઴B6ɪ୻B4ᴏB32B2ɴ &7»&f"
# Don't use \n, use {NL} for new line, and {PRFX} for prefix.
main:
# Maximum time for player to authenticate in milliseconds. If the player stays on the auth limbo for longer than this time, then the player will be kicked.
auth-time: 480000
enable-bossbar: true
# Available colors: PINK, BLUE, RED, GREEN, YELLOW, PURPLE, WHITE
bossbar-color: YELLOW
# Available overlays: PROGRESS, NOTCHED_6, NOTCHED_10, NOTCHED_12, NOTCHED_20
bossbar-overlay: PROGRESS
min-password-length: 4
# Max password length for the BCrypt hashing algorithm, which is used in this plugin, can't be higher than 71. You can set a lower value than 71.
max-password-length: 71
check-password-strength: true
unsafe-passwords-file: "unsafe_passwords.txt"
# Players with premium nicknames should register/auth if this option is enabled
# Players with premium nicknames must login with a premium Minecraft account if this option is disabled
online-mode-need-auth: true
# Needs floodgate plugin if disabled.
floodgate-need-auth: true
# TOTALLY disables hybrid auth feature
force-offline-mode: false
# Forces all players to get offline uuid
force-offline-uuid: false
# If enabled, the plugin will firstly check whether the player is premium through the local database, and secondly through Mojang API.
check-premium-priority-internal: true
# Delay in milliseconds before sending auth-confirming titles and messages to the player. (login-premium-title, login-floodgate, etc.)
premium-and-floodgate-messages-delay: 1250
# Forcibly set player's UUID to the value from the database
# If the player had the cracked account, and switched to the premium account, the cracked UUID will be used.
save-uuid: true
# Saves in the database the accounts of premium users whose login is via online-mode-need-auth: false
# Can be disabled to reduce the size of stored data in the database
save-premium-accounts: true
enable-totp: true
totp-need-password: true
register-need-repeat-password: true
change-password-need-old-password: true
# Used in unregister and premium commands.
confirm-keyword: "confirm"
# This prefix will be added to offline mode players nickname
offline-mode-prefix: ""
# This prefix will be added to online mode players nickname
online-mode-prefix: ""
# If you want to migrate your database from another plugin, which is not using BCrypt.
# You can set an old hash algorithm to migrate from.
# AUTHME - AuthMe SHA256(SHA256(password) + salt) that looks like $SHA$salt$hash (AuthMe, MoonVKAuth, DSKAuth, DBA)
# AUTHME_NP - AuthMe SHA256(SHA256(password) + salt) that looks like SHA$salt$hash (JPremium)
# SHA256_NP - SHA256(password) that looks like SHA$salt$hash
# SHA256_P - SHA256(password) that looks like $SHA$salt$hash
# SHA512_NP - SHA512(password) that looks like SHA$salt$hash
# SHA512_P - SHA512(password) that looks like $SHA$salt$hash
# SHA512_DBA - DBA plugin SHA512(SHA512(password) + salt) that looks like SHA$salt$hash (DBA, JPremium)
# MD5 - Basic md5 hash
# ARGON2 - Argon2 hash that looks like $argon2i$v=1234$m=1234,t=1234,p=1234$hash
# MOON_SHA256 - Moon SHA256(SHA256(password)) that looks like $SHA$hash (no salt)
# SHA256_NO_SALT - SHA256(password) that looks like $SHA$hash (NexAuth)
# SHA512_NO_SALT - SHA512(password) that looks like $SHA$hash (NexAuth)
# SHA512_P_REVERSED_HASH - SHA512(password) that looks like $SHA$hash$salt (nLogin)
# SHA512_NLOGIN - SHA512(SHA512(password) + salt) that looks like $SHA$hash$salt (nLogin)
# CRC32C - Basic CRC32C hash
# PLAINTEXT - Plain text
migration-hash: null
# Available dimensions: OVERWORLD, NETHER, THE_END
dimension: OVERWORLD
purge-cache-millis: 3600000
purge-premium-cache-millis: 28800000
purge-bruteforce-cache-millis: 28800000
# Used to ban IPs when a possible attacker incorrectly enters the password
bruteforce-max-attempts: 3
# QR Generator URL, set {data} placeholder
qr-generator-url: "
https://api.qrserver.com/v1/create-qr-code/?data={data}&size=200x200&ecc=M&margin=30"
totp-issuer: "Auth by demonulia"
bcrypt-cost: 10
login-attempts: 3
ip-limit-registrations: 3
totp-recovery-codes-amount: 16
# Time in milliseconds, when ip limit works, set to 0 for disable.
ip-limit-valid-time: 0
# Regex of allowed nicknames
# ^ means the start of the line, $ means the end of the line
# [A-Za-z0-9_] is a character set of A-Z, a-z, 0-9 and _
# {3,16} means that allowed length is from 3 to 16 chars
allowed-nickname-regex: "^[A-Za-z0-9_]{3,16}$"
load-world: true
# World file type:
# SCHEMATIC (MCEdit .schematic, 1.12.2 and lower, not recommended)
# STRUCTURE (structure block .nbt, any Minecraft version is supported, but the latest one is recommended).
# WORLDEDIT_SCHEM (WorldEdit .schem, any Minecraft version is supported, but the latest one is recommended).
world-file-type: WORLDEDIT_SCHEM
world-file-path: "lobby.schem"
disable-falling: true
# World time in ticks (24000 ticks == 1 in-game day)
world-ticks: 1000
# World light level (from 0 to 15)
world-light-level: 15
# Available: ADVENTURE, CREATIVE, SURVIVAL, SPECTATOR
game-mode: ADVENTURE
# Custom isPremium URL
# You can use Mojang one's API (set by default)
# Or CloudFlare one's:
https://api.ashcon.app/mojang/v2/user/%s # Or use this code to make your own API:
Minecraft API with Workers + CoffeeScript # Or implement your own API, it should just respond with HTTP code 200 (see parameters below) only if the player is premium
ispremium-auth-url: "
https://api.ashcon.app/mojang/v1/user/%s"
# Status codes (see the comment above)
# Responses with unlisted status codes will be identified as responses with a server error
# Set 200 if you use using Mojang or CloudFlare API
status-code-user-exists:
- 200
# Set 204 and 404 if you use Mojang API, 404 if you use CloudFlare API
status-code-user-not-exists:
- 204
- 404
# Set 429 if you use Mojang or CloudFlare API
status-code-rate-limit:
- 429
# Sample Mojang API exists response: {"name":"hevav","id":"9c7024b2a48746b3b3934f397ae5d70f"}
# Sample CloudFlare API exists response: {"uuid":"9c7024b2a48746b3b3934f397ae5d70f","username":"hevav", ...}
#
# Sample Mojang API not exists response (sometimes can be empty): {"path":"/users/profiles/minecraft/someletters1234566","errorMessage":"Couldn't find any profile with that name"}
# Sample CloudFlare API not exists response: {"code":404,"error":"Not Found","reason":"No user with the name 'someletters123456' was found"}
#
# Responses with an invalid scheme will be identified as responses with a server error
# Set this parameter to [], to disable JSON scheme validation
user-exists-json-validator-fields:
- "name"
- "id"
json-uuid-field: "id"
user-not-exists-json-validator-fields: []
# If Mojang rate-limits your server, we cannot determine if the player is premium or not
# This option allows you to choose whether every player will be defined as premium or as cracked while Mojang is rate-limiting the server
# True - as premium; False - as cracked
on-rate-limit-premium: true
# If Mojang API is down, we cannot determine if the player is premium or not
# This option allows you to choose whether every player will be defined as premium or as cracked while Mojang API is unavailable
# True - as premium; False - as cracked
on-server-error-premium: true
register-command:
- "/r"
- "/reg"
- "/register"
login-command:
- "/l"
- "/log"
- "/login"
totp-command:
- "/2fa"
- "/totp"
# New players will be kicked with registrations-disabled-kick message
disable-registrations: false
# Implement the automatic login using the plugin, the LimboAuth client mod and optionally using a custom launcher
# See
GitHub - Elytrium/LimboAuth-ClientMod: Implement auto-login with the LimboAuth plugin, the client mod and (optionally using) a custom launcher mod:
enabled: true
# Should the plugin forbid logging in without a mod
login-only-by-mod: false
# The key must be the same in the plugin config and in the server hash issuer, if you use it
verify-key: "hJ8ulV9DYJuEXCgs83TPetlR"
world-coords:
x: 0
y: 0
z: 0
auth-coords:
x: 30.5
y: 21.0
z: 40.5
yaw: -90.0
pitch: 0.0
cracked-title-settings:
fade-in: 20
stay: 80
fade-out: 30
clear-after-login: false
premium-title-settings:
fade-in: 10
stay: 70
fade-out: 20
# Available values: FALSE, TRUE, PERMISSION
# FALSE - the command will be disallowed
# TRUE - the command will be allowed if player has false permission state
# PERMISSION - the command will be allowed if player has true permission state
command-permission-state:
# Permission: limboauth.commands.changepassword
change-password: TRUE
# Permission: limboauth.commands.destroysession
destroy-session: PERMISSION
# Permission: limboauth.commands.premium
premium: PERMISSION
# Permission: limboauth.commands.totp
totp: PERMISSION
# Permission: limboauth.commands.unregister
unregister: PERMISSION
# Permission: limboauth.admin.forcechangepassword
force-change-password: PERMISSION
# Permission: limboauth.admin.forceregister
force-register: PERMISSION
# Permission: limboauth.admin.forceunregister
force-unregister: PERMISSION
# Permission: limboauth.admin.reload
reload: PERMISSION
# Permission: limboauth.admin.help
help: PERMISSION
strings:
reload: "{PRFX} ff7aУспешная перезагрузка"
error-occurred: "{PRFX} &#ff262cПроизошла ошибка"
ratelimited: "{PRFX} &cPlease wait before next usage!"
database-error-kick: "{PRFX} &fОшибка базы данных"
not-player: "{PRFX} &#ff262cКонсоль не может выполнять эту команду"
not-registered: "{PRFX} &#ff262cВы не за зарегистрированы"
cracked-command: "{PRFX} {NL}§aВы не можете использовать эту команду, так как ваша учетная запись §6PREMIUM§a!"
wrong-password: "{PRFX} &#ff262cПароль неверный"
nickname-invalid-kick: "&#ff262cАвторизация {NL} {NL}&#e6e6e6Ваш никнейм содержит запрещёные символы. Поменяйте его"
reconnect-kick: "&#ff262cАвторизация {NL} {NL}&fПереподключитесь к серверу чтобы подтвердить аккаунт"
# 6 hours by default in ip-limit-valid-time
ip-limit-kick: "&#ff262cАвторизация {NL} {NL}&fВы достигли лимита аккаунтов"
wrong-nickname-case-kick: "&#ff262cАвторизация {NL} {NL}&fПоменяйте ник с ff7a{1} &fна ff7a{0}"
bossbar: "אCCУ вас есть ff25{0} секунд"
times-up: "&#ff262cАвторизация {NL} {NL}&#ff262cВремя авторизации вышло"
login-premium: "{PRFX} Вы вошли в систему автоматически, используя премиум-аккаунт.!" # Can be empty.
login-premium-title: "{PRFX} Welcome!" # Can be empty.
login-premium-subtitle: "ff7aYou has been logged in as premium player!" # Can be empty.
login-floodgate: "{PRFX} You've been logged in automatically using the bedrock account!" # Can be empty.
login-floodgate-title: "{PRFX} Welcome!" # Can be empty.
login-floodgate-subtitle: "ff7aYou has been logged in as bedrock player!" # Can be empty.
login: "{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{PRFX} Добро пожаловать на אCCʀ±DC9ɪA73C6ᴏD68C2ᴛÍDBFᴄ࣌BCʀ৴B9ᴀěDB5ꜰB32B2ᴛ&f{NL}{PRFX} &fЕсли вы зашли впервые, данный аккаунт уже был אCCзڒCAа±CC8р޸C6еB6FC5гC69C3иE63C1сÍDBFт࡭BDрयBBиôBB9р੔B8оěEB6в୺B4аB32B2н{NL}{PRFX} &fИ вам стоит сменить никнейм.{NL}{PRFX} &fВойдите в аккаунт: אCC/ʟᴏɢɪɴ [ᴘᴀssᴡᴏʀᴅ]"
login-wrong-password: "{PRFX} &fВы ввели неправильный пароль. У вас осталось ff7a{0} &fпопытки"
login-wrong-password-kick: "&#ff262cАвторизация {NL} {NL}&#ff262cВы ввели неправильный пароль слишком много раз"
login-successful: "§f{NL}§f{PRFX} §fАвторизация §aуспешно §fпройдена{NL}§f"
login-title: "אCC&lᴀڑCA&lᴜ»AC8&lᴛA73C6&lʜC6BC3&lᴏE64C1&lʀÍDBF&lɪ࡬BD&lᴢêFBB&lᴀ৴B9&lᴛ઴B6&lɪ୻B4&lᴏB32B2&lɴ" # Can be empty.
login-subtitle: "אCC/ʟᴏɢɪɴ [ᴘᴀssᴡᴏʀᴅ]" # Can be empty.
login-successful-title: "אCC&lᴀڑCA&lᴜ»AC8&lᴛA73C6&lʜC6BC3&lᴏE64C1&lʀÍDBF&lɪ࡬BD&lᴢêFBB&lᴀ৴B9&lᴛ઴B6&lɪ୻B4&lᴏB32B2&lɴ" # Can be empty.
login-successful-subtitle: "&fВы успешно авторизировались" # Can be empty.
# Or if register-need-repeat-password set to false remove the "<repeat password>" part.
register: "{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{NL}{PRFX} Добро пожаловать на אCCʀ±DC9ɪA73C6ᴏD68C2ᴛÍDBFᴄ࣌BCʀ৴B9ᴀěDB5ꜰB32B2ᴛ&f новобранец{NL}{PRFX} Придумайте сложный пароль{NL}{PRFX} и запишите свой пароль{NL}{PRFX} &fЗарегистрируйтесь: אCC&l/ʀᴇɢɪsᴛᴇʀ [ᴘᴀssᴡᴏʀᴅ] [ʀᴇᴘᴇᴀᴛ_ᴘᴀssᴡᴏʀᴅ]"
register-different-passwords: "{PRFX} &#ff262cПароли отличаються"
register-password-too-short: "{PRFX} &#ff262cСликом короткий пароль"
register-password-too-long: "{PRFX} &#ff262cСликом длиный пароль"
register-password-unsafe: "{PRFX} &#ff262cСликом легкий пароль"
register-successful: "{PRFX} &fВы §aуспешно §fзарегистрировались!"
register-title: "אCC&lʀ±CC8&lᴇB6FC5&lɢE63C1&lɪ࡭BD&lsôBB9&lᴛěEB6&lᴇB32B2&lʀ" # Can be empty.
register-subtitle: "אCC/ʀᴇɢɪsᴛᴇʀ [ᴘᴀssᴡᴏʀᴅ] [ʀᴇᴘᴇᴀᴛ_ᴘᴀssᴡᴏʀᴅ]" # Can be empty.
register-successful-title: "&#fb9f02&lʀ&#fba605&lᴇ&#fbad09&lɢ&#fbb40c&lɪ&#fbba10&ls&#fbc113&lᴛ&#fbc817&lᴇ&#fbcf1a&lʀ" # Can be empty.
register-successful-subtitle: "&fУспешная регистрация" # Can be empty.
unregister-successful: "&#ff262cАвторизация {NL} {NL}ff7aУспешная раз регистрация"
unregister-usage: "{PRFX} &fИспользованиe: &#fcd900/unregister ПАРОЛЬ confirm"
premium-successful: "{PRFX} {NL}ff7aSuccessfully changed account state to &#ff7707PREMIUMff7a!"
already-premium: "{PRFX} &#ff262cYour account is already &#ff7707PREMIUM&#ff262c!"
not-premium: "{PRFX} &#ff262cYour account is not &#ff7707PREMIUM&#ff262c!"
premium-usage: "{PRFX} Usage: &#ff7707/premium <current password> confirm"
event-cancelled: "{PRFX} &#ff262cАвторизация отменена"
force-unregister-successful: "{PRFX} ff7aУспешная раз регистрация"
force-unregister-kick: "&#ff262cАвторизация {NL} {NL}&fВы раз регистрированы администратором"
force-unregister-not-successful: "{PRFX} &#ff262cUnable to unregister &#ff7707{0}&#ff262c. Most likely this player has never been on this server."
force-unregister-usage: "{PRFX} &fИспользованиe: ff7a/forceunregister НИК"
registrations-disabled-kick: "{PRFX} Registrations are currently disabled."
change-password-successful: "{PRFX} &fУспешная смена пароля"
# Or if change-password-need-old-pass set to false remove the "<old password>" part.
change-password-usage: "{PRFX} &fИспользованиe: ff7a/changepassword &7&oСтарыйПароль НовыйПароль"
force-change-password-successful: "{PRFX} &fУспешное изменение пароля"
force-change-password-message: "{PRFX} &fВаш пароль изменён администратором"
force-change-password-not-successful: "{PRFX} &fНевозможно изменить пароль. Игрок не найден"
force-change-password-not-registered: "{PRFX} &fИгрок не зарегистрирован"
force-change-password-usage: "{PRFX} Использованиe: ff7a/forcechangepassword НИК НОВЫЙ_ПАРОЛЬ"
force-register-usage: "{PRFX} Использованиe: ff7a/forceregister НИК НОВЫЙ_ПАРОЛЬ"
force-register-incorrect-nickname: "{PRFX} &fНик содержит запрещёные символы"
force-register-taken-nickname: "{PRFX} &fНик уже занят"
force-register-successful: "{PRFX} &#e6e6e6Successfully registered player &#fcd900{0}"
force-register-not-successful: "{PRFX} &#e6e6e6Unable to register player &#fcd900{0}"
totp: "{PRFX} Please, enter your 2FA key using &#ff7707/2fa <key>"
totp-title: "{PRFX}" # Can be empty.
totp-subtitle: "ff7aEnter your 2FA key using &#ff7707/2fa <key>" # Can be empty.
totp-successful: "{PRFX} ff7aSuccessfully enabled 2FA!"
totp-disabled: "{PRFX} ff7aSuccessfully disabled 2FA!"
# Or if totp-need-pass set to false remove the "<current password>" part.
totp-usage: "{PRFX} Usage: &#ff7707/2fa enable <current password>&f or &#ff7707/2fa disable <totp key>&f."
totp-wrong: "{PRFX} &#ff262cWrong 2FA key!"
totp-already-enabled: "{PRFX} &#ff262c2FA is already enabled. Disable it using &#ff7707/2fa disable <key>&#ff262c."
totp-qr: "{PRFX} Click here to open 2FA QR code in browser."
totp-token: "{PRFX} ff7aYour 2FA token &7(Click to copy)ff7a: &#ff7707{0}"
totp-recovery: "{PRFX} ff7aYour recovery codes &7(Click to copy)ff7a: &#ff7707{0}"
destroy-session-successful: "{PRFX} &eYour session is now destroyed, you'll need to log in again after reconnecting."
mod-session-expired: "{PRFX} Your session has expired, log in again."
# Database settings
database:
# Database type: mariadb, mysql, postgresql, sqlite or h2.
storage-type: H2
# Settings for Network-based database (like MySQL, PostgreSQL):
hostname: ""
user: ""
password: ""
database: ""
connection-parameters: ""