So a week or so ago I decided to start a public Minecraft server. I wanted it to be Vanilla but shortly after releasing the address a botter found my server and logged in with about 50 accounts and crashed it. A few days later someone started making lava walls everywhere near the spawn. Needless to say I learned pretty quickly that it was actually necessary to have plugins to prevent stuff like that from happening in a public server.
So now I've got Spigot and there's a load of really good plugins and some terrible ones. Even ones filled with malware.
My question is, what plugins do you think are necessary to have all the functions you would need in a vanilla server?
Currently I have EssentialsX, Worldborder and NuVotifier.
I need some anti griefing, so players can claim land and not have their house destroyed. But I don't want the claim size to be very big and have a maximum amount of pieces of land they can claim.
I also need some way to have a message broadcasted every 30-45 minutes to give information about the website, Discord and rules.
Also anything that could be fun but doesn't necessarily change the game-play too much. For instance I saw one that was about Gifting and you could give gifts to people. I could potentially use that with a login reward plugin where if a player logs in for 3-5 consecutive days they're able to give someone a gift and get a few diamonds or a made up currency to spend on the server.
Also I'm not really aware of all the exploits that are possible in a Minecraft server. I saw one about duping items with some kind of item stacking glitch. What are all the plugins that are known to be trusted in 1.14.4 that will make it hard to flub up my server and make it ugly?
The first one I would go for is CoreProtect. It allows you to inspect blocks to see who made the most recent change and roll back to a pre-grief setting.
There are also a lot of datapacks available. One of my favorites is Player Graves by https://vanillatweaks.net/ . This creates a "grave" when a player dies, which stores everything that was in their inventory. Many players experience lag that can cause their death.
Sorry I'm late to the party. WorldGuard to protect the things you build like spawn, transportation, etc. GriefPrevention for the players to be able to protect their claims. Spartan Anti-Cheat is exactly what you think it is. Some kind of entity locker like LWC or BlockLocker so that you or players can lock doors, chests, etc. CoreProtect is the single most important plugin you can install. I've used it for 6 years and it has never let me down.
Also, if you are running Spigot you may as well switch to Paper for the performance improvements.