fix(minecraft): set enforce-secure-profile=false to bypass Mojang WAF block on homelab egress IP

cluster/applications/minecraft/configmap.yaml

@@ -27,6 +27,10 @@ data:
 
   # Auth
   ONLINE_MODE: "true"
+  # Mojang's sessionserver blocks some datacenter/homelab IPs via Cloudflare WAF.
+  # enforce-secure-profile=false allows players to join without mandatory profile key validation.
+  # ONLINE_MODE=true still enforces Mojang account auth — this only relaxes the key signing requirement.
+  ENFORCE_SECURE_PROFILE: "false"
 
   # Whitelist — set to true when ready to lock down the server
   WHITE_LIST: "false"

cluster/applications/minecraft/deployment.yaml

@@ -109,6 +109,11 @@ spec:
                 configMapKeyRef:
                   name: papermc-config
                   key: ONLINE_MODE
+            - name: ENFORCE_SECURE_PROFILE
+              valueFrom:
+                configMapKeyRef:
+                  name: papermc-config
+                  key: ENFORCE_SECURE_PROFILE
             - name: WHITE_LIST
               valueFrom:
                 configMapKeyRef: