Changelog
Server and modpack updates for Homestead SMP.
HARDEN
Small Surface-Area Hardening Pass
Verified
- Grafana and BlueMap now listen on localhost only; their public-facing paths and Minecraft remained healthy after restart.
- RCON and all monitoring backends were rechecked from outside the VPS and remain blocked by the host and provider firewalls.
- Nightly backup, archive verification, retention pruning, status API, exporters, availability monitoring, and game services all passed live health checks.
Hardened
- Audit logging now follows Minecraft log replacement and truncation safely, closing a stale-offset gap after restart or rotation.
- The public site now sends an explicit content security policy, HSTS, clickjacking protection, permissions restrictions, and MIME-sniffing protection.
- Uptime Kuma is configured for a localhost-only listener, with administrative access retained through SSH tunneling.
OPS
Infrastructure & Security Overhaul
Fixed
- Backup system rebuilt after a disk-full incident silently corrupted several nightly archives — backups are now world-consistent, verified nightly, and pruned to a disk budget automatically. Full write-up in the public repo.
- Closed the last high-severity finding from the April pentest (a credential visible in the server process list) and rotated the affected credential.
Added
- Server-side performance mods (Lithium, FerriteCore, ModernFix, Krypton) installed through the mod-integrity gate — profiled at 19.97 TPS under load afterward.
- A new Ops & Security page documenting how this server is run.
Updated
- CI/CD dependency refresh: pinned GitHub Actions and API dependencies brought current; quarterly threat-model review completed with no new threats.
1.3.6
Homestead 1.3.6
- Minor modpack update, no notable changes
1.3.5
Homestead 1.3.5
- Minor modpack update, no notable changes
1.3.4
Homestead 1.3.4 Upgrade
Fixed
- Obsidian smithing template now obtainable, unblocking quest progression
- Abacus out-of-memory error resolved for more stable memory usage
- Server crashes from JER removed
Added
- Create: Slice & Dice for food automation with Create
- Automated mod checksum verification on every server start
- This changelog page
Updated
- Obsidian Equipment Reworked → 0.4
- Open Parties and Claims → 0.26.1
- Moonlight Lib → 2.16.30
- Simple Voice Chat → 2.6.16
- Entity Culling → 1.10.1
- JEI → 15.20.0.130
1.3.1
Initial Server Launch
- Server launched on Hetzner CX43
- Homestead 1.3.1 on Fabric 1.20.1
- BlueMap live map at map.geigercapital.us
- Voice chat enabled on UDP 24454