Add safe mode config and startup override

Author: Distortions81

config_build.go

@@ -28,6 +28,7 @@ func buildBaseFileConfig(cfg Config) baseFileConfig {
 			StratumPasswordEnabled: cfg.StratumPasswordEnabled,
 			StratumPassword:        cfg.StratumPassword,
 			StratumPasswordPublic:  cfg.StratumPasswordPublic,
+			SafeMode:               cfg.SafeMode,
 		},
 		Node: nodeConfig{
 			RPCURL:           cfg.RPCURL,
@@ -198,6 +199,7 @@ func (cfg Config) Effective() EffectiveConfig {
 		StratumTLSListen:                  cfg.StratumTLSListen,
 		StratumFastDecodeEnabled:          cfg.StratumFastDecodeEnabled,
 		StratumFastEncodeEnabled:          cfg.StratumFastEncodeEnabled,
+		SafeMode:                          cfg.SafeMode,
 		CKPoolEmulate:                     cfg.CKPoolEmulate,
 		StratumTCPReadBufferBytes:         cfg.StratumTCPReadBufferBytes,
 		StratumTCPWriteBufferBytes:        cfg.StratumTCPWriteBufferBytes,

config_examples.go

@@ -94,6 +94,8 @@ func baseConfigDocComments() []byte {
 # - [stratum].stratum_password_enabled: Require miners to send a password on authorize (requires restart).
 # - [stratum].stratum_password: Password string checked against mining.authorize params (requires restart).
 # - [stratum].stratum_password_public: Show the stratum password on the public connect panel (requires restart).
+# - [stratum].safe_mode: Force conservative compatibility/safety behavior (disables fast-path Stratum tuning and unsafe debug/public-RPC toggles).
+# - Runtime override: --safe-mode=true/false
 #
 # Logging
 # - [logging].level: debug, info, warn, error (requires restart).

config_file_types.go

@@ -39,6 +39,7 @@ type stratumConfig struct {
 	StratumPasswordEnabled bool   `toml:"stratum_password_enabled"`
 	StratumPassword        string `toml:"stratum_password"`
 	StratumPasswordPublic  bool   `toml:"stratum_password_public"`
+	SafeMode               bool   `toml:"safe_mode"`
 }
 
 type authConfig struct {

config_load.go

@@ -233,6 +233,7 @@ func applyBaseConfig(cfg *Config, fc baseFileConfigRead) (configChanged bool, mi
 		cfg.StratumPassword = ""
 	}
 	cfg.StratumPasswordPublic = fc.Stratum.StratumPasswordPublic
+	cfg.SafeMode = fc.Stratum.SafeMode
 	if fc.Node.RPCURL != "" {
 		cfg.RPCURL = fc.Node.RPCURL
 	}

config_types.go

@@ -61,6 +61,8 @@ type Config struct {
 	// Stratum fast encode: enables canned/manual JSON encoding for common Stratum
 	// responses to reduce allocations (encode path only).
 	StratumFastEncodeEnabled bool
+	// Safe mode: force conservative compatibility/safety-oriented runtime behavior.
+	SafeMode bool
 	// CKPool compatibility mode: advertise a minimal CKPool-style subscribe
 	// result (mining.notify tuple only) while keeping other compatibility paths.
 	CKPoolEmulate bool
@@ -205,6 +207,7 @@ type EffectiveConfig struct {
 	StratumTLSListen                  string   `json:"stratum_tls_listen,omitempty"`
 	StratumFastDecodeEnabled          bool     `json:"stratum_fast_decode_enabled"`
 	StratumFastEncodeEnabled          bool     `json:"stratum_fast_encode_enabled"`
+	SafeMode                          bool     `json:"safe_mode,omitempty"`
 	CKPoolEmulate                     bool     `json:"ckpool_emulate"`
 	StratumTCPReadBufferBytes         int      `json:"stratum_tcp_read_buffer_bytes,omitempty"`
 	StratumTCPWriteBufferBytes        int      `json:"stratum_tcp_write_buffer_bytes,omitempty"`

data/config/examples/config.toml.example

@@ -9,6 +9,8 @@
 # - [stratum].stratum_password_enabled: Require miners to send a password on authorize (requires restart).
 # - [stratum].stratum_password: Password string checked against mining.authorize params (requires restart).
 # - [stratum].stratum_password_public: Show the stratum password on the public connect panel (requires restart).
+# - [stratum].safe_mode: Force conservative compatibility/safety behavior (restart to apply).
+# - Runtime override: --safe-mode=true/false
 #
 # Logging
 # - [logging].level: debug, info, warn, error (requires restart).
@@ -52,6 +54,7 @@
   status_tls_listen = ":443"
 
 [stratum]
+  safe_mode = false
   stratum_password = ""
   stratum_password_enabled = false
   stratum_password_public = false

defaults.go

@@ -18,6 +18,7 @@ func defaultConfig() Config {
 		StratumPasswordEnabled:              false,
 		StratumPassword:                     "",
 		StratumPasswordPublic:               false,
+		SafeMode:                            false,
 		CKPoolEmulate:                       true,
 		StratumFastDecodeEnabled:            false,
 		StratumFastEncodeEnabled:            false,

main.go

@@ -44,6 +44,15 @@ func main() {
 	statusAddrFlag := flag.String("status", "", "override status HTTP listen address (e.g. :80)")
 	statusTLSAddrFlag := flag.String("status-tls", "", "override status HTTPS listen address (e.g. :443)")
 	stratumTLSFlag := flag.String("stratum-tls", "", "override stratum TLS listen address (e.g. :24333)")
+	var safeModeFlag *bool
+	flag.Func("safe-mode", "force conservative compatibility/safety profile (true/false)", func(v string) error {
+		b, err := strconv.ParseBool(strings.TrimSpace(v))
+		if err != nil {
+			return err
+		}
+		safeModeFlag = &b
+		return nil
+	})
 	var ckpoolEmulateFlag *bool
 	flag.Func("ckpool-emulate", "override Stratum subscribe response shape compatibility (true/false)", func(v string) error {
 		b, err := strconv.ParseBool(strings.TrimSpace(v))
@@ -125,6 +134,7 @@ func main() {
 		statusAddr:          *statusAddrFlag,
 		statusTLSAddr:       *statusTLSAddrFlag,
 		stratumTLSListen:    *stratumTLSFlag,
+		safeMode:            safeModeFlag,
 		ckpoolEmulate:       ckpoolEmulateFlag,
 		stratumFastDecode:   fastDecodeFlag,
 		stratumFastEncode:   fastEncodeFlag,
@@ -311,6 +321,7 @@ func main() {
 		"component", "startup",
 		"kind", "config",
 		"listen_addr", cfg.ListenAddr,
+		"safe_mode", cfg.SafeMode,
 		"stratum_tls_listen", cfg.StratumTLSListen,
 		"status_addr", cfg.StatusAddr,
 		"status_tls_addr", cfg.StatusTLSAddr,

runtime_overrides.go

@@ -12,6 +12,7 @@ type runtimeOverrides struct {
 	statusAddr          string
 	statusTLSAddr       string
 	stratumTLSListen    string
+	safeMode            *bool
 	ckpoolEmulate       *bool
 	stratumFastDecode   *bool
 	stratumFastEncode   *bool
@@ -78,7 +79,6 @@ func applyRuntimeOverrides(cfg *Config, overrides runtimeOverrides) error {
 	if overrides.allowPublicRPC {
 		cfg.AllowPublicRPC = true
 	}
-
 	if overrides.bind != "" {
 		_, port, err := net.SplitHostPort(cfg.ListenAddr)
 		if err != nil {
@@ -131,6 +131,9 @@ func applyRuntimeOverrides(cfg *Config, overrides runtimeOverrides) error {
 	if overrides.ckpoolEmulate != nil {
 		cfg.CKPoolEmulate = *overrides.ckpoolEmulate
 	}
+	if overrides.safeMode != nil {
+		cfg.SafeMode = *overrides.safeMode
+	}
 	if overrides.stratumFastDecode != nil {
 		cfg.StratumFastDecodeEnabled = *overrides.stratumFastDecode
 	}
@@ -154,6 +157,39 @@ func applyRuntimeOverrides(cfg *Config, overrides runtimeOverrides) error {
 	if cfg.ZMQHashBlockAddr == "" && cfg.ZMQRawBlockAddr == "" {
 		logger.Warn("zmq is not configured; using RPC/longpoll-only mode", "hint", "set node.zmq_hashblock_addr/node.zmq_rawblock_addr in config.toml to enable ZMQ (legacy node.zmq_block_addr is read-only for migration)")
 	}
+	if cfg.SafeMode {
+		applySafeModeProfile(cfg)
+	}
 
 	return nil
 }
+
+func applySafeModeProfile(cfg *Config) {
+	if cfg == nil {
+		return
+	}
+	cfg.SafeMode = true
+
+	// Conservative compatibility/safety defaults for troubleshooting and broad miner support.
+	cfg.CKPoolEmulate = true
+	cfg.StratumFastDecodeEnabled = false
+	cfg.StratumFastEncodeEnabled = false
+	cfg.StratumTCPReadBufferBytes = 0
+	cfg.StratumTCPWriteBufferBytes = 0
+
+	cfg.LogDebug = false
+	cfg.LogNetDebug = false
+
+	cfg.ShareRequireAuthorizedConnection = true
+	cfg.ShareCheckParamFormat = true
+	cfg.ShareCheckDuplicate = true
+	cfg.ShareRequireJobID = true
+	cfg.SubmitProcessInline = false
+
+	// Prefer widest miner compatibility over stricter policy checks.
+	cfg.ShareCheckNTimeWindow = false
+	cfg.ShareCheckVersionRolling = false
+	cfg.ShareRequireWorkerMatch = false
+
+	cfg.DisableConnectRateLimits = true
+}