Banned players see a kick screen with the reason, who banned them, the expiry and your appeal link.

Muted players can't chat. With block-pm-when-muted: true they also can't use /msg, /tell, /w, /whisper, /r, /reply, /me or /say.

Frozen players see a title and regular chat reminders. They can't move, break or place blocks, attack, interact, drop or pick up items, or use their inventory. Only the commands in freeze.allowed-commands work (by default /msg, /r, /tell, /w and /helpop). If they log out while frozen, staff are alerted and, with auto-ban-on-disconnect, they are banned automatically (1 day by default).

premade-punishments:
  hacking:
    type: TEMP_BAN
    duration: "7d"
    reason: "Cheating / Unfair Advantage"
  spam:
    type: TEMP_MUTE
    duration: "30m"
    reason: "Chat Spam / Flooding"
  advertising:
    type: IP_MUTE
    reason: "Malicious Advertising"

Types: BAN, IP_BAN, MUTE, IP_MUTE, KICK, WARN (TEMP_BAN, TEMP_MUTE etc. also work). Add a duration for a temporary punishment, or leave it out for a permanent one.

When a player joins sharing an IP with other accounts, staff with averiabans.alerts.alts get an alert. If one of those accounts is banned, it's flagged as possible ban evasion and sent to Discord.

These default to nobody, not even OPs. Console can always punish anyone.

• Dashboard: active bans and mutes, punishments in the last 24 hours, players online, top staff and latest staff activity.
• Punishments: search by player, IP, staff member or reason; filter by type and status; unban or unmute in one click.
• New punishment: ban, temp-ban, mute, temp-mute, IP-ban, IP-mute, warn or kick from the browser.
• Player lookup: active ban or mute, full history, known IPs, alt accounts with their ban status, and the player's inventory and ender chest.
• Online players: world, ping and IP, with freeze, kick and punish buttons.
• Staff logs: a searchable record of every staff action from in-game, the console and the panel.
• Alt alerts: the history of alt-account join detections.
• Staff accounts (main admin only): add staff, reset their passwords, or remove them.

Punishments from the panel work exactly like the in-game commands: players are kicked, broadcasts and Discord webhooks fire, and the staff member's panel username is recorded as who issued it.

The player lookup page shows the player's inventory and ender chest drawn like the real Minecraft screens: armor slots, offhand, player model, hotbar, stack counts, durability bars and the enchantment glint. Hover (or tap on mobile) any item to see its exact in-game tooltip, including custom names, enchantments, lore, attributes and potion effects.

• Online players: shows their live inventory.
• Offline players: shows the last saved copy, taken when they join, when they leave, and every 5 minutes while online.

Item icons, player heads and the pixel font load from the Minecraft Wiki, mcasset.cloud, mc-heads.net and Google Fonts in the viewer's browser.

• New accounts have no password. The person signs in with their username and an empty password, and chooses their own.
• Add accounts right before you share them: until a password is set, anyone who knows the username could set it first.
• The main admin can reset a staff member's password; they choose a new one at their next sign-in.
• Forgot the main admin password? Run ab panel reset <username> in the console.
• To change the main admin, change admin-username and /ab reload. The previous main admin becomes a regular staff account.

• Passwords are stored as salted PBKDF2 hashes in the database, never in config.yml.
• 5 wrong passwords from one IP locks that IP out for 10 minutes.
• Resetting a password or deleting an account signs that person out immediately.
• Login cookies are HttpOnly and SameSite=Strict, and all changes are protected against cross-site request forgery.
• The panel serves plain HTTP. If you expose it to the internet, use strong passwords, or put it behind a reverse proxy with HTTPS (Caddy, nginx) and set bind-address: "127.0.0.1".

• Set the port with web-panel.port. On hosted servers, use a port allocated to your server.
• The address is picked automatically: the server-ip from server.properties if set, otherwise all interfaces. bind-address overrides this.
• With detect-public-ip: true, the plugin looks up your public IP once at startup so the console can print the outside address.

strip-bold: true                     # remove bold formatting from all messages
date-format: "yyyy-MM-dd HH:mm:ss"
timezone: ""                         # blank = the server machine's timezone, or e.g. "Europe/London"
block-pm-when-muted: true            # muted players can't /msg, /r, /tell...
appeal-link: "discord.gg/averia"     # shown on ban screens as {appeal_link}

# Take over /ban, /kick, /mute, /banlist... from vanilla and other plugins.
override-other-plugin-commands: true

web-panel:
  enabled: true
  admin-username: ""                 # main admin; sign in with it to set its password
  port: 8085
  bind-address: ""                   # blank = automatic
  session-hours: 12
  detect-public-ip: true

discord:
  enabled: false
  webhook-url: ""

freeze:
  title: "<#E06C75>YOU ARE FROZEN</#E06C75>"
  subtitle: "<#ABB2BF>Do not log out! Check chat.</#ABB2BF>"
  chat-reminder: "<#E06C75>You are currently frozen by staff. Do not disconnect!</#E06C75>"
  reminder-interval-ticks: 60
  allowed-commands: ["/msg", "/r", "/tell", "/w", "/helpop"]
  auto-ban-on-disconnect: true
  auto-ban-duration: "1d"
  auto-ban-reason: "Logged out while frozen"

broadcasts:
  enabled: true
  permission-only: true              # only players with averiabans.broadcast.view see them

alerts:
  alts-join:
    enabled: true

default-reasons:                     # used when staff don't give a reason
  ban: "No Reason"
  mute: "No Reason"
  # ...one entry per punishment type

Combine units freely: 1d12h, 2w3d.

All messages live in messages.yml and support MiniMessage (<#E06C75>, <gradient:...>, <hover:...>), hex colors (&#E06C75) and legacy codes (&c).

Set discord.enabled: true and paste a webhook URL into discord.webhook-url. AveriaBans posts:

• Every punishment, color-coded by type
• Unbans and unmutes
• Freezes and unfreezes
• Players logging out while frozen
• Ban-evasion alerts (a banned player's alt joining)

No. With override-other-plugin-commands: true (the default), AveriaBans takes over /ban, /kick, /mute, /pardon and the rest from vanilla and other plugins. The other plugin's version still works with its prefix, e.g. /essentials:ban.

No. Everything is stored in a local SQLite file (plugins/AveriaBans/punishments.db), and the web panel runs inside the plugin.

Check that the port in web-panel.port is open in your firewall, or allocated to your server on your host. The address to use is printed in the console at startup and shown with /ab panel.

Run ab panel reset <username> in the server console, then sign in with that username and an empty password to set a new one.

Inventories are saved when a player joins or leaves (and every 5 minutes while online). A player who hasn't joined since you installed AveriaBans won't have one saved yet.