modules/console.yml
Forwards filtered console lines and optionally accepts tightly controlled remote commands.
See Discord console for setup and usage.
Before enabling
- Use a private staff-only channel.
- Start with remote mode
OFF. - Review redaction and deny patterns against your plugin stack.
- Never grant access based only on a display name.
Remote commands
Feed and remote execution are separate. FULL mode requires explicit acknowledgement and still applies mandatory deny patterns. Remote commands are audited and rate-limited, but they remain a high-risk feature.
Default configuration
plugins/CoreDSC/modules/console.yml
config-version: 4
generated-by-version: "2.5.2"
# Live console feed and remote command execution. Keep disabled until reviewed.
enabled: false
# Required for remote execution; falls back to discord.guild-id.
guild-id: ''
channel-id: ''
feed:
enabled: true
batch-interval-ticks: 40
maximum-lines-per-batch: 40
maximum-queued-lines: 500
levels: [INFO, WARNING, SEVERE]
include-patterns: []
exclude-patterns:
- '\[Console\]'
redact-patterns:
- '(?i)(token|password|secret|authorization)(\s*[:=]\s*)\S+'
- '(?i)[A-Za-z0-9_-]{24,}\.[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{20,}'
remote:
# OFF, ALLOWLIST or FULL. FULL still enforces every deny pattern.
mode: 'OFF'
prefix: '!console '
role-ids: []
cooldown-seconds: 3
maximum-command-length: 256
maximum-commands-per-minute: 20
audit-retention-days: 90
# Mandatory acknowledgement before FULL mode is accepted.
confirm-full-access: false
allowlisted-commands:
- list
- say
- whitelist
deny-patterns:
- '(?i)^\s*(minecraft:)?(stop|restart|reload)\b'
- '(?i)^\s*(op|deop|promote|demote)\b'
- '(?i)^\s*(plugman|plugins?)\b'
- '(?i)^\s*coredsc\s+(reload|setup|migrate)\b'
- '(?i)(token|password|secret)'