Paper/Java via itzg/minecraft-server in docker compose; whitelist and ops synchronized from Ansible, RCON on localhost only, explicit EULA flag. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
