FortressCore

# 🏰 FortressCore ### *The Ultimate Security & Administration Suite for Minecraft Servers* **FortressCore** is a battle-tested, all-in-one server protection plugin built for server owners who take security seriously. From AI-powered threat detection to per-role permissions — everything you need to run a safe, well-managed server is in one place. > ⚡ Offline-mode friendly · 🤖 Gemini AI powered · 🔒 BCrypt encrypted · 📋 Fully configurable --- ## 🤖 AI-Powered Security ### *Gemini 3.5 Flash Integration* FortressCore's AI engine runs **7 independent security modules** — all async, all rate-limited, all falling back to rule-based logic if the API is unavailable. Set your API key and let it run. | Module | What it does | |---|---| | 🔍 **Join Threat Analysis** | Profiles every connecting player and auto-kicks or bans critical threats | | 🔑 **Login Anomaly Detection** | Flags account takeover attempts via IP region and time fingerprinting | | 💬 **Chat Moderation** | Scans every message for toxicity, ads, scams and auto-executes actions | | ⌨️ **Command Abuse Detection** | Catches exploit probing and permission escalation in real time | | 👁️ **Watchlist Automation** | Monitors flagged players and delivers an AI verdict after a watch period | | 📜 **Ban Appeal Review** | Reads player appeals and recommends deny / reduce / pardon to owners | | 📊 **Security Reports** | Scheduled threat summaries with trend analysis broadcast to online owners | - All Gemini prompt templates are **editable in config.yml** - **Daily quota tracking** — automatically pauses AI at Google's free-tier limit and resumes at UTC midnight - **Circuit breaker** — stops retrying on quota exhaustion instead of spamming your logs - Full rule-based fallback when AI is unavailable or disabled --- ## 🔒 Security Features ### 🪪 Login & Account Protection - Mandatory **login / registration** system with **BCrypt** password hashing - **Anti-impersonation** — username-based password locking so no one can join as someone else on offline-mode servers - Configurable **session durations** — set once per day, per hour, or never expire - **Two-Factor Authentication (2FA)** with time-based codes - Login attempt limits with **automatic temporary IP bans** - **everytime_login toggle** — choose whether players re-authenticate on every join ### 🛡️ Anti-Hack & Anti-Bot - **Lockdown Mode** — auto-activates on join spikes, manually togglable - **VPN / Proxy detection** via proxycheck.io with configurable actions - **IP whitelist & blacklist** management - **Username blacklist** with regex pattern matching - **Anti-spam** chat protection with auto-mute - **Anti-flood** and fast-reconnect detection with auto-ban ### 🔑 Access Control - **Multi-owner system** — separate from vanilla op, immune to all security checks - **FortressCore op management** — your own op tier independent of Minecraft - **IP history tracking** per player with full audit trail --- ## 👑 Role System *(New in 1.0.4)* A fully featured permission and display tier system built into the plugin — no external permissions plugin required. - **4 built-in roles** — OWNER · ADMIN · MODERATOR · MEMBER - Create **unlimited custom roles** (VIP, Builder, Trusted...) in config.yml - Per-role **chat color**, **name color**, **prefix**, **suffix**, and **priority** - Roles control **tab list order** and **scoreboard display** automatically - Full **wildcard permission** support — give `*` or `fortresscore.*` to a role - `/role give/take/info/list/create/delete/edit/addperm/delperm` - Changes saved to `player_roles.yml` — hot-reloadable with `/fc reload` --- ## 🛠️ Moderation Tools ### ⚖️ Bans & Punishments - Permanent and **temporary bans** for players and IPs - Ban list with **paginated viewing** - **AI-assisted appeal review** — staff gets a sincerity score and recommendation - `/ban` `/ipban` `/unban` `/unipban` `/banlist` ### 👥 Player Management - `/kick` `/kickall` `/mute` `/unmute` `/freeze` - `/burn` `/smite` `/strike` — fire and lightning punishment tools - `/kill` `/killall` — entity and mob cleanup - **Command Spy** — monitor all player commands in real time - **Social Spy** — monitor private messages - **Staff Chat** — isolated channel for staff communication --- ## 🔁 Daily Restart System *(New in 1.0.4)* Schedule automatic server restarts without any external scripts. - Set **multiple restart times** per day in `HH:mm` format (e.g. `04:00`, `12:00`) - Full **timezone support** — use any Java ZoneId (e.g. `Asia/Kolkata`, `UTC`) - **Countdown warnings** at configurable intervals — 5min, 2min, 1min, 30s, 10s... - **Action bar timer** shown to all players during final countdown - **Title animation** in the last 10 seconds - **Postpone mode** — skip restart if players are online, retry automatically - `/restart now` `/restart in 5m` `/restart cancel` `/restart status` - All plugin data is **saved to disk** before every restart — zero data loss --- ## 🐛 Bug Report System *(Ne