Changelog
Server, session, and operations updates across Parallel Works.
OBS
Monitoring and Logging Depth Pass
Added
- Centralized, 14-day logging now covers both Minecraft profiles, audit events, backups, Nginx, cloudflared, and the systemd journal through loopback-only Loki and Alloy services.
- Grafana now provides dedicated operations and log-investigation dashboards, including errors, audit activity, backup lifecycle, tunnel redundancy, and log-ingestion views.
- Predictive disk-capacity, Cloudflare connector, Loki pipeline, and Prometheus rule-health alerts extend the existing availability and backup coverage.
- Monthly full-extraction restore drills, seven-day profile availability, live player gauges, actionable log alerts, and a weekly ntfy health digest close the gap between archive presence and recoverability.
- The status API, audit logger, and integrity watcher now have narrow systemd sandboxes, with an explicit reviewed-path integrity gate available for future pack scripts and configuration.
Verified
- Prometheus, Alertmanager, Node Exporter, both game exporters, Grafana, Loki, Alloy, and the connector remain locally monitored while administrative access stays behind Cloudflare Access.
SKY
SkyFactory 4 Parallel Session
Added
- SkyFactory 4.2.4 now runs beside Homestead in an isolated Forge 1.12.2 runtime with its own world, Java 8 process, and TCP 25566 game listener.
- The DNS-only address sb.geigercapital.us uses a Minecraft SRV record so players do not need to enter the alternate port.
- A dedicated status page and API endpoint report SkyFactory availability without changing Homestead status or its live map.
Verified
- Two clean boots, the exact pack protocol, public reachability, service isolation, memory headroom, and blocked public RCON access were checked before play.
- Homestead remains active on TCP 25565 and its world is never opened by the SkyFactory service.
HARDEN
Small Surface-Area Hardening Pass
Verified
- Grafana and BlueMap now listen on localhost only; their public-facing paths and Minecraft remained healthy after restart.
- RCON and all monitoring backends were rechecked from outside the VPS and remain blocked by the host and provider firewalls.
- Nightly backup, archive verification, retention pruning, status API, exporters, availability monitoring, and game services all passed live health checks.
Hardened
- Audit logging now follows Minecraft log replacement and truncation safely, closing a stale-offset gap after restart or rotation.
- The public site now sends an explicit content security policy, HSTS, clickjacking protection, permissions restrictions, and MIME-sniffing protection.
- Uptime Kuma is configured for a localhost-only listener, with administrative access retained through SSH tunneling.
OPS
Infrastructure & Security Overhaul
Fixed
- Backup system rebuilt after a disk-full incident silently corrupted several nightly archives — backups are now world-consistent, verified nightly, and pruned to a disk budget automatically. Full write-up in the public repo.
- Closed the last high-severity finding from the April pentest (a credential visible in the server process list) and rotated the affected credential.
Added
- Server-side performance mods (Lithium, FerriteCore, ModernFix, Krypton) installed through the mod-integrity gate — profiled at 19.97 TPS under load afterward.
- A new Ops & Security page documenting how this server is run.
Updated
- CI/CD dependency refresh: pinned GitHub Actions and API dependencies brought current; quarterly threat-model review completed with no new threats.
1.3.6
Homestead 1.3.6
- Minor modpack update, no notable changes
1.3.5
Homestead 1.3.5
- Minor modpack update, no notable changes
1.3.4
Homestead 1.3.4 Upgrade
Fixed
- Obsidian smithing template now obtainable, unblocking quest progression
- Abacus out-of-memory error resolved for more stable memory usage
- Server crashes from JER removed
Added
- Create: Slice & Dice for food automation with Create
- Automated mod checksum verification on every server start
- This changelog page
Updated
- Obsidian Equipment Reworked → 0.4
- Open Parties and Claims → 0.26.1
- Moonlight Lib → 2.16.30
- Simple Voice Chat → 2.6.16
- Entity Culling → 1.10.1
- JEI → 15.20.0.130
1.3.1
Initial Server Launch
- Server launched on Hetzner CX43
- Homestead 1.3.1 on Fabric 1.20.1
- BlueMap live map at map.geigercapital.us
- Voice chat enabled on UDP 24454