# Aegis
# https://www.mc-market.org/resources/13304/
# The best protection ever. Protection against powerful bot attacks (fast + slow), nullping crashers (bungee exploits/smashers)
# Aegis also contains lots of features from well-known BotFilter by leymooo + we have lots of our own features - and the most important thing: exploit patches
help: "Discord: yooniks#0289"

# Do not use '\ n', use %nl%
messages:
  proxy-not-loaded: "&eЗагрузка данных... Пожалуйста подождите"
  bungeecord-command: "&9Самая мощная защита для вашего Proxy-сервера. /aegis"
  prefix: "&f[&ci&f]"
  statistics: "&c&nСтатистика&r&7 -> &cВсего заблокировано: &6{TOTAL-BLOCKED} &7| &cCPS: &6{CPS} &7| &cPPS: &6{PPS} &7| &cCH: &6{CHECKING}"
  cerberus: "&c&nCerberus&r&7 -> &cВсего отклонённых подключений: &6{TOTAL-BLOCKED} &7| &cCPS: &6{CPS} &a&l{FANCY-CHAR}"
  checking: "%prefix% Пожалуйста подождите..."
  checking-captcha: "%prefix% Напишите число с картинки в чат."
  checking-captcha-wrong: "%prefix% Капча введена неверно, попробуйте снова. "
  successfully: "%prefix% Проверка пройдена!"
  kick-many-checks: "%prefix%%nl%%nl%&cПодозрительная активность была замечена с вашего IP адреса%nl%%nl%&6Попробуйте через 10 минут.%nl%&c(Убедитесь, что не используете чит NoFall или AntiKnock)"
  kick-not-player: "%prefix%%nl%%nl%&cВы не прошли проверку, возможно вы бот или используете читы (nofall или antiknockback)%nl%&7&oЕсли это ошибка, пожалуйста перезайдите."
  kick-country: "%prefix%%nl%%nl%&cСервер недоступен в вашей стране."
  kick-big-ping: "%prefix%%nl%%nl%&cУ вас слишком высокий пинг."
  # Title%nl%Subtitle
  # Leave blank to stop ( edit: CHECKING_TITLE = "" )
  # Turning off titles can slightly improve performance.
  checking-title: "&r%nl%&aПроверка..."
  checking-title-sus: "&aПроверка пройддена%nl%&aУдачной игры!"
  checking-title-captcha: " %nl%&rВведите капчу в чат!"
  bot-behaviour: "%prefix%%nl%%nl%&cYour are acting like a bot, please try again"

# Please ignore it, it is for the developer - yooniks
cerberus:
  # Is cerberus enabled?
  enabled: false
  # Ip of server where Cerberus is hosted
  # It is probably your server vps/dedicated server address.
  server-ip: "yourCerberusServerIP"
  # You have to unblock that port with firewall
  server-udp-port: 54777
  # You have to unblock that port with firewall
  server-tcp-port: 54555
  # How long (max) should we wait for response from Cerberus-Server? After that time, if we did not get response we automatically skip/bypass the connection
  packet-timeout: 5000
  connect-timeout: 5000
  # Cerberus will verify connections only when cps are higher than 10 by default
  work-only-when-cps-bigger-than: 10
  threads: 20

# Enable or Disable GeoIp
geo-ip:
  # When verification is working
  # 0 - Always
  # 1 - Only during the bot attack
  # 2 - Never
  mode: 1
  # How exactly does GeoIp work
  # 0 - White list(Only those countries in the list can enter)
  # 1 - Black list(Only countries that are not in the list can enter)
  type: 0
  # Please DO NOT USE THAT if you do not have GEOIP bought, you should use country blocker from anti-vpn configuration that is below.
  # URL to download GEOIP
  # Change the link if it does not working.
  # The filename must end with .mmdb or be packed in .tar.gz
  geoip-download-url: "http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country.tar.gz"
  # Allowed country (default: Asean)
  allowed-countries:
  - "RU"
  - "UA"
  - "BY"
  - "KZ"
  - "EE"
  - "MD"
  - "KG"
  - "AZ"
  - "LT"
  - "LV"
  - "GE"
  - "PL"

# Enable or stop high ping checking
ping-check:
  # When verification is working
  # 0 - Always
  # 1 - Only during the bot attack
  # 2 - Never
  mode: 1
  # Maximum allowed ping
  max-ping: 356

# Setting how protection will work
# 0 - Only check with captcha
# 1 - Drop check + captcha
# 2 - Drop check, if failed, then captcha
# I heard that there are some new bots that bypass drop/falling test so i recommend to use 1 on big servers
protection:
  # Should we verify player again when he passed falling test but his ip changed?
  verify-again-on-ip-change: true
  # Operation mode when no attack
  normal: 0
  # Operation mode during the attack
  on-attack: 0
  # Should we listen for MC|Brand plugin message?
  # Bots very often do not send that thing, normal clients send it always, to check server version
  # If you set to TRUE -> better protection against very good bypassing bots
  check-mcbrand: true

aegis-settings:
  # Put your license key here, to get the license key you have to contact me on discord: yooniks0289 and send proof of payment from paypal
  license: "9PPZUYlks7HMoPPj"
  # Do you want pretty clean console? When aegis blocks bots etc. it will not show it in the console if it's set to true.
  clean-console: true
  # List of bypass/skipped ips - e.g. your other bungee ip (if you run multi proxies) or your HAProxy.
  bypass-ips:
  - "127.0.0.1"
  - "188.165.218.20"
  - "46.105.245.75"
  - "94.130.120.10"
  # Do you want to allow 1.7 clients to join your server?
  allow-v1-7-support: false
  # Matters only when AUTH-SYSTEM is disabled! Otherwise this option is useless.
  # Should we support online uuids? It will automatically stop falling/drop test (falling verification).
  # If you do not use our own auth-system and you have plugin that auto-logins premium players like FastLogin or JHPremium then set it to true.
  online-uuids-support: false
  # Should we print exceptions from disconnects? Set to false to have cleaner console.
  print-exceptions: false
  # Should we print stacktraces of exceptions from disconnects? If you are being disconnected when you join etc. it helps to solve problems thanks to logs file. Set to false for cleaner console.
  print-stacktraces-from-exceptions: false
  # Game version? In some clients it is shown right next to the motd/players count. You can set it to your server name like UltraPVP
  game-version: "Core"
  # Blocked protocols of versions (If you want e.g to block 1.14.4 players, this option is for you!
  # Minecraft protocols (versions): https://wiki.vg/Protocol_version_numbers for example: 1.8.8 is 47
  blocked-protocols: []
  # Kick message when your version is blocked
  protocol-blocked: "&cВерсии для входа - 1.8-1.15.2"
  # Delayed disconnections in auth-system? Can look better
  delayed-disconnections: false
  # Do we limit pings per ip?
  limit-pings-per-ip: true
  min-length-name: 3
  max-length-name: 16
  # Should we limit serverConnector connects? Like 1 connect per second to server (per ip)
  limit-serverconnector-connects: false
  # In millis
  limit-serverconnector-time: 1000
  ignore-captcha-generation-kick: false
  # Advanced configuration, you can change min and max lengths of login packets if you have any bugs with current ones
  login-packets:
    min-length-first-packet: 3
    max-length-first-packet: 1035
    min-length-second-packet: 3
    max-length-second-packet: 66
  advanced-checks:
    # Should we check if string.length() == stringBytes.length? China chars etc. will be blocked
    check-difference-string-bytes: false
    encryption-limitter: true
    handshake-limitter: true
    # Should we block every new connection when cps are higher than X? Set to -1 to disable.
    # If you have any issues with AuthSmasher and it is not fixed yet please set it to something like 150 or bigger to block only authsmasher, not bot attacks
    block-new-connections-when-cps-is-higher-than: -1
    # Should we limit connections per ip for 3 seconds if BLOCK_NEW_CONNECTIONS_WHEN_CPS_IS_HIGHER_THAN exceed?
    limit-connections-per-ip-when-attack: true
    # If LIMIT_CONNECTIONS_PER_IP_WHEN_ATTACK is true, how high is the limit?
    limit-connections-per-ip-when-attack-limit: 7
    # Is your server being attacked with AuthSmasher?
    # Do you have cracked players only? (Like online-mode=false and there is no plugin like FastLogin or JPremium)
    # If yes - please enable this option, it will surely prevent AuthSmasher, because they use this packet to crash the server while.... packet is useless so we can remove it!
    remove-encryption: true
  # Blacklist configuration
  blacklist:
    # Should we block addresses/ips if they send invalid packets? (null ping / bungee smasher etc)
    enabled: true
    # Blacklist mode!
    # 0 - IPSet + File + Runtime (blacklist.txt)
    # 1 - Runtime + File
    # Default: 1 - Runtime block and file should be enough.
    blacklist-mode: 1
    # Configuration of blacklist in file (blacklist.txt)
    file:
      # When file is empty (0 blacklisted proxies) should we download proxies from yooniks website to your blacklist.txt?
      load-from-url-when-file-is-empty: true
      # Works only when IPSet is installed
      # Run these commands in root, not bungee!
      # To install IPSet: apt-get install ipset
      # After installing IPSet you have to create blacklist list: ipset create -! blacklist hash:ip hashsize 4096
      # If you do that all the blacklist size will be much faster and bad connections will be blocked much faster which blocks every attack much faster
      block-with-ipset-when-file-loaded: false
    commands:
      # Command that is being executed when we block an address
      # If you are using Windows (instead of Unix-like system), replace the command with that one:
      # cmd /c netsh advfirewall firewall add rule name=blacklist dir=in interface=any protocol=TPC localport=25565 action=block remoteip={ip}/32
      block-command: "ipset -! -A blacklist {ADDRESS}"
      # A command that we will use to install IPSet on your machine.
      # apt --yes install ipset    <--- APT (e.g. Debian, Ubuntu)
      # yum -y install ipset   <--- YUM (e.g. CentOS, older versions of Fedora)
      # dnf -assumeyes install ipset <--- DNF (e.g. newer versions of Fedora)
      install-ipset-command: "apt-get --yes install ipset"
      # A command that we will use to configure/setup the blacklist with ipset
      configure-ipset-command: "ipset create -! blacklist hash:ip hashsize 4096"
    # Should AntiBot block connections with blacklist if we are sure that it is bot?
    block-when-sure: true
    # Max captcha failures in 5 minutes, per one ip address
    # If address exceed this limit it will be blocked
    # Works only if connections per sec > 2 or pings per second > 10
    max-captcha-failures: 5
    # If ip cannot go through ping-shell 10 times, per one ip address
    # Then it will be blocked with blacklist
    # Works only when connections per second > 3 or pings per second > 20
    max-ping-shell-failures: 10
    # If ip cannot go through name-match more than 1 time, per one ip address
    # Then it will be blocked with blacklist
    # Works only when connections per second > 5 or pings per second > 50
    max-name-match-failures: 1

# AntiVPN settings!
# You can configure websites (url), keys for websites etc. in aegis_antibot.yml
antivpn:
  enabled: false
  title-checking: "&7%nl%&eПроверка..."
  title-checked: "&aПроверка пройдена%nl%&fУдачной игры!"
  chat-checking: "&eПроверка..."
  chat-checked: "&aВы не используете VPN. Проверка успешно пройдена."
  kick-message: "&cВаш IP адрес заблокирован. Вы используете VPN или Proxy."
  too-long: "&cСлишком долгая верификация..."
  # Country checker settings
  country-checker:
    # Should we block some countries? Is it feature enabled?
    # To check the country of player we use website: http://ip-api.com/
    enabled: false
    # List of allowed countries (country codes!)
    allowed-countries:
    - "RU"
    - "UA"
    - "BY"
    - "KZ"
    - "EE"
    - "MD"
    - "KG"
    - "AZ"
    - "LT"
    - "LV"
    - "GE"
    - "PL"
    # URL of website
    # You can put your paid key here.
    # Default limit of requests per minute is 150, if it exceed the limit we allow the player.
    url: "http://ip-api.com/json/{ADDRESS}"
    # Limit of requests per minute
    # If you have any paid key you can change that value to higher one.
    requests-limit: 150

# Auth system configuration
auth:
  # Is auth system enabled?
  enabled: false
  # MySQL configuration
  mysql:
    # Server certification?
    use-ssl: false
    hostname: "127.0.0.1"
    port: 3306
    user: "user"
    password: "password"
    database: "database"
    # Database type: mysql or sqlite
    type: "sqlite"
    # Encryption/hash type, bcrypt or sha-256 (bcrypt is much better)
    encryption: "bcrypt"
  # Auth messages
  messages:
    loading-user-chat: "&6&lAegis: &cLoading your data.."
    loading-user-title: "&6&lAegis%nl%&cLoading your data.."
    loaded-user: "&6&lAegis: &cLoaded your data!"
    premium-message-chat: "&6&lAegis: &cYou are premium user! Moving to the server automatically.."
    premium-message-title: "&6&lAegis%nl%&cPremium user!"
    login-message: "&6&lAegis: &cPlease login by using &6/login [password]&c!"
    register-message: "&6&lAegis: &cPlease register by using &6/register [password] [password]&c!"
    logged-message: "&6&lAegis: &aYou have been logged-in successfully!"
    registered-message: "&6&lAegis: &aYour account has been registered successfully!"
    logged-message-title: "&6&lAegis%nl%&cLogged in!"
    login-message-title: "&6&lAegis%nl%&cPlease login yourself."
    register-message-title: "&6&lAegis%nl%&cPlease register your acc."
    your-data-is-being-loaded: "&6&lAegis: &cYou cannot use this command! Your data is not loaded yet."
    premium-user-cannot-do-that: "&6&lAegis: &cYou are &6premium user&c, you cannot do that!"
    passwords-do-not-match: "&6&lAegis: &cPasswords do not match!"
    kick-message-too-long: "&6&lAegis%nl%&cYou have to log-in in 30 seconds!"
    premium-need-relogin: "&6&lAegis%nl%&cYou are &6PREMIUM &cuser! &cPlease re-login to finish verification!"
    wrong-name: "&6&lAegis%nl%&cYou should join with nickname &6{OLD-NAME}&c!"
    changepassword-same-pass: "&6&lAe&e&lgis&8: &cCurrent and new password are the same!"
    changepassword-usage: "&6&lAe&e&lgis&8: &cCorrect usage: &6/changepassword [current password] [new password]"
    changepassword-error-premium: "&6&lAe&e&lgis&8: &cYou are premium user! You cannot change your password because it doesn't exist."
    changepassword-wrong-pass: "&6&lAe&e&lgis&8: &cTyped password is incorrect!"
    changepassword-success: "&6&lAe&e&lgis&8: &cYou have changed your &6password&c!"
    changepassword-not-logged: "&6&lAe&e&lgis&8: &cYou are not logged!"
    # If you want every player to /register and /login, even if they are premium players and you don't want them to be auto-logged just set it to false.
    allow-premium-users: true
    # Should we ask user if he is seriously premium user? Maybe it's cracked player with cracked launcher that just uses premium nickname? Then he will not be able to join with cracked launcher when he use premium nickname. If you want to allow these cracked people to use premium nicknames and ask them if they are premium then just set it to true.
    ask-users-if-premium-when-premium: true
    ask-user-when-premium-chat: "&6&lAe&e&lgis&8: &c--> &6Are you premium user? &cWe detected that your nickname is premium name, if you are using premium launcher please type &6YES&c on the chat, if you are cracked (non-premium) user - type &6NO&c on chat."
    ask-user-when-premium-title: "&cAre you &6premium user&c?%nl%&cType &a&lYES &cor &c&lNO &con chat."
    # What the asked player has to write on chat to agree that he is premium user?
    ask-user-if-premium-yes-answer: "yes"
    # YES answer of premium user in other languages like German and Polish
    # In lowerCase (small letters)! So please do not write e.g JA here, just ja!
    ask-user-if-premium-yes-answer-aliases:
    - "ja"
    - "tak"
    # What the asked player has to write on chat to agree that he is cracked/non-premium user?
    ask-user-if-premium-no-answer: "no"
    # NO answer of premium user in other languages like German and Polish
    # In lowerCase (small letters)! So please do not write e.g NEIN here, just nein!
    ask-user-if-premium-no-answer-aliases:
    - "nein"
    - "nie"

# Database Setup
sql:
  # Database type. sqlite or mysql
  storage-type: "sqlite"
  # After how many days to remove players from the database, which have been tested and no longer entered. 0 or less to stop
  purge-time: 14
  # Settings for mysql
  hostname: "localhost"
  port: 3306
  user: "user"
  password: "password"
  database: "database"
# How many players / bots should go in 1 minute for protection to be activated
# Recommended options when there is no advertising:
# Up to 150 online - 25, up to 250 - 30, up to 350 - 35, up to 550 - 40.45, above - adjust to yourself
# It is recommended to increase these values ​​during an advertisement or when a current is flowing.
protection-threshold: 28
# How long is automatic protection active? In milliseconds. 1 second = 1000
protection-time: 120000
# Check whether the bot on entering the server during a bot attack, regardless of whether the check passed or not
force-check-on-attack: true
# Show online with filter (will show players that are being verified in motd), we do not want to show bots in players count so it is disabled by default
show-online: false
# How much time does the player have to go through the defense. In milliseconds. 1 second = 1000
time-out: 12700
# Enable / Disable compatibility with old plugins that use ScoreBoard on a bungee?
# Set to false if there are problems with new plugins.
fix-scoreboards: true
# Fix for: 'Team 'xxx' already exist in this scoreboard'
fix-scoreboard-teams: true