2.17.133

Highlights since 2.16.208

Compatibility scanner + dashboard banner (2.17.130-132)

New boot-time + periodic compatibility scanner. Detects version drift between Paper, Geyser, Floodgate, ViaVersion/ViaBackwards, LuckPerms, CoreProtect, and voicechat. Surfaces issues via persistent dashboard banner with one-click fix buttons. Tiered notifications: BLOCKER fires WhatsApp + Discord + Email, WARN fires Discord only. Self-healing — issues auto-clear when admin fixes them. Snooze + acknowledge lifecycle for issues you can't fix immediately.

In-JVM Mojang API retry shim (2.17.133)

Wraps the JVM-wide SSLSocketFactory so HTTPS calls to api.minecraftservices.com get up to 6 transparent retries on empty/timeout reads. Fixes the silent-drop failure mode where Geyser's encryption-setup call to Mojang fails permanently for the JVM lifetime (every subsequent Bedrock login throws NoClassDefFoundError). Pure in-JVM; no certificate generation, no listening port, no routing changes. Only sockets to api.minecraftservices.com are wrapped; all other HTTPS traffic uses the unmodified default factory.

Geyser boot recovery (2.17.128-129)

Backup safety net: if MojangRetryProxy fails for any reason and Geyser logs "Unable to set up encryption", NovaSync detects within 60s and triggers an automatic Paper restart. Configurable max-attempts (default 20). Persists across restarts so an exhausted loop resets cleanly.

Bedrock plugins one-click update (2.17.123-126, 130)

Dashboard button installs/updates Geyser, Floodgate, ViaVersion, and ViaBackwards atomically from their official sources (Modrinth / GeyserMC / Hangar with fallbacks). Owner-gated, audit-logged, single restart loads all four.

Owner-tab consolidation

Plugin Manager, NovaSync Update, License Key, OpenAI Key, Security, Sync, Backups, Gamerules, Advanced, Hub, Features, NovaLink — all moved under the Owner sub-bar. Clearer permission boundary: dashboard admins can moderate players but cannot touch infrastructure unless they hold the OWNER role.

Security hardening (2.17.114-126)

Ten security fixes across multiple subsystems: constant-time API key comparison, OWNER gate on /api/admin/relaunch-via-startscript, per-IP+username rate limit on update-channel unlock-fast, audit-on-deny for privileged-action attempts.

Recommended plugins curated set

recommended-plugins.json ships with the 7 plugins NovaSync integrates with: CoreProtect, Geyser-Spigot, Floodgate, ViaVersion, ViaBackwards, LuckPerms, Simple Voice Chat. First-run setup wizard offers a one-click install of any missing ones from the dashboard.

Compatibility

• Paper 1.21.11 or compatible
• Java 21+
• Drop-in: no other plugins required; LuckPerms / Voicechat / CoreProtect / Geyser / Floodgate / Via* are all optional integrations