Repository navigation
Security
Users | Network | Accessibility | Backup | Risk-Analysis
Only one admin user exists on the production server however administration of the minecraft server itself can be accessed and managed by authenticated users over SSH via the RCON-CLI prompt.
We considered this to be the most secure way to manage the server despite detracting from its serviceability
Ports have been opened for neccessary application such as SSH, DynMap and the Minecraft server. For security reasons ports will be discluded in the wiki.
Access to the production server is restricted to its owner except for some services that can be reached over SSH.
Currently logs and generated world data is backed up only onsite. Should a server crash occure or data be corrupt, a rollback will be possible.
| Risk | Description | Likelyhood | Danger | Risk Value | Action |
|---|---|---|---|---|---|
| Non-Static IP | ISP could decide to assign another ip to the server |
1 | 2 | 2 | Update DNS Records |
| Power | RIP Rasmus power bill | 1 | 5 | 5 | Anyone else can also host the server :) |
| Network issues | Stupid ISP | 2 | 3 | 6 | |
| Burglary | Nobody cares about the "very fancy" server anyway |
1 | 5 | 5 | |
| Hacks | If the server gets hacked... | 1 | 5 | 5 | |
| DDoS | 1 | 4 | 4 | ||
| Java Failure | The Java JVM is weird | 2 | 5 | 5 | Restart on Error |
| Server Crash | If the server gets overloaded it will crash and become unavailable |
3 | 5 | 15 | Hardware Upgrade Improve Configuration |
| Griefing | Stop bullying me | 4 | 5 | 20 | CoreProtect monitors player actions and allows rollbacks of such instances Will switch to whitelist access after "trial period" |
FlipFlop - A minecraft server project
Content: Docker | Scripts | Persistance
Content: Users | Network | Accessibility | Backup | Risk-Analysis