clara/nix-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

futile attempt to conf a forge server using nix…

Browse source
This commit is contained in:
CDaut 2025-10-19 19:18:08 +02:00
parent 9e2b38fbcc
commit 4465bc828b
Signed by: clara
GPG key ID: 223391B52FAD4463
4 changed files with 63 additions and 76 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.sops.yaml
View file

@ -4,7 +4,7 @@ keys:
# Servers # Servers
- &wireguard age12d8mxwnt0a7gl4uu0uwdqaxuqdf5j7zm50qy5qrhj0kd4ny7luaqv7rj4e - &wireguard age12d8mxwnt0a7gl4uu0uwdqaxuqdf5j7zm50qy5qrhj0kd4ny7luaqv7rj4e
- &mcserver age1v98yggaarelrp7z8rljzpf3gm70up4q8460trejmptdpv7gjucrqssjz9h - &mcserver age1jlt47gkctq7vfrykqlyg9um5mypy872pvtfql7kkpvhnemlex4mq89a3a8
- &zammad age14ukkn4plvnjacvjux929qwpeynxk4cfxw285vlwddqakm43kfyysfdg02c - &zammad age14ukkn4plvnjacvjux929qwpeynxk4cfxw285vlwddqakm43kfyysfdg02c
- &forgejo age1vd33efsea2509hm0dwmhkuu7mm2kgw6tsss6lmzsqfg7gat06qyqys3qfh - &forgejo age1vd33efsea2509hm0dwmhkuu7mm2kgw6tsss6lmzsqfg7gat06qyqys3qfh
- &mastodon age19efecaur72d92g452zpe4uxjtwev2ktjtaezascxg9l2p8544s8s05d93r - &mastodon age19efecaur72d92g452zpe4uxjtwev2ktjtaezascxg9l2p8544s8s05d93r

4
configs/containers/mc_container.nix
View file

@ -1,7 +1,7 @@
{ lib, pkgs, config, ... }: { { lib, pkgs, config, ... }: {
deployment = { deployment = {
targetHost = "192.168.178.56"; targetHost = "192.168.178.65";
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = "root";
}; };
@ -14,6 +14,6 @@
]; ];
imports = [ imports = [
../container_config.nix ../container_config.nix
../services/minecraft-server.nix #../services/minecraft-server.nix
]; ];
} }

31
configs/services/minecraft-server.nix
View file

@ -1,37 +1,24 @@
{ lib, pkgs, config, ... }: { { lib, pkgs, config, inputs, ... }: {
nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
"minecraft-server" "minecraft-server"
]; ];
imports = [ inputs.nix-minecraft.nixosModules.minecraft-servers ];
nixpkgs.overlays = [ inputs.nix-minecraft.overlay ];
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
rconc rconc
]; ];
services.minecraft-server = { services.minecraft-servers = {
package = pkgs.papermc;
enable = true; enable = true;
eula = true; eula = true;
openFirewall = true; # Opens the port the server is running on (by default 25565 but in this case 43000)
declarative = true; tmma = {
whitelist = { enable = true;
# This is a mapping from Minecraft usernames to UUIDs. You can use https://mcuuid.net/ to get a Minecraft UUID for a username package = pkgs.fabricServers.fabric-1_7_10;
Scarpiro = "fbbc57a7-189e-4108-916a-7efeed47b197";
LadyRaveena = "a1629c6b-48aa-4b42-8cbf-a7930db39ea2";
}; };
serverProperties = {
difficulty = 1;
gamemode = 0;
max-players = 2;
motd = "Minecraft UwU :3";
white-list = true;
allow-cheats = true;
pvp = false;
enable-rcon = true;
"rcon.password" = "foobar2342";
"rcon.port" = 25575;
};
jvmOpts = "-Xms2048M -Xmx2048M";
}; };
networking.firewall.allowedTCPPorts = [ 8080 ]; networking.firewall.allowedTCPPorts = [ 8080 ];

102
secrets/all/secrets.yaml
View file

@ -4,87 +4,87 @@ sops:
- recipient: age12d8mxwnt0a7gl4uu0uwdqaxuqdf5j7zm50qy5qrhj0kd4ny7luaqv7rj4e - recipient: age12d8mxwnt0a7gl4uu0uwdqaxuqdf5j7zm50qy5qrhj0kd4ny7luaqv7rj4e
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBma1VoR3cySWFsUENLMnd2 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrZlNQem5ZYVhSbzB5T2pU
UEtKTEtwbEhSL0lMT3ZFTlVYS1FRTzc3Q2xZCjFrTmJaMUFRREpDRVNIeHIwTmFx ZHFreDNkVHBiRThteDBqcjhsYkQ5R3B6NGtBCkRlMlRoN3NxeGo1QVE0ZEdYRjNE
R1dLZ1FpTlgrcTUrRWZycVJzNVdGekUKLS0tIE1WTlh6YlJrZDI4MFpTV2RhRG81 dGdtVHJiL2JHU3BmbVB5YWVyRWhSMVUKLS0tIEJDVzY2ZUN0ZDYvcFRQbVdSZnUv
UWo1NGI3cGZmdWRBaGN2Y0N6NDNtcFkKbtxnjccJz2Ru6cInLpG05bvtJEvO2mfS bXZIQjJXZnlLb1M5UHBMSEdsZFBLZUEKgNoMGAblrQDCUcTHyK/9pE/84wJLR2cu
x283QrBHQnsvg/ph45xn8umptiZii7pSvPJoChjAb7BK+jq5elScZA== qgLuL9oPGT4jpPf/WWTVNgfwrBNBbrFoDjF0fe3WpukBrEHIRf+3KA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1v98yggaarelrp7z8rljzpf3gm70up4q8460trejmptdpv7gjucrqssjz9h - recipient: age1jlt47gkctq7vfrykqlyg9um5mypy872pvtfql7kkpvhnemlex4mq89a3a8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwbExENjg4YzdEa1BscXVP YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByTGVOZ2xqdEJlWitXaFc0
bnFFS2pTUHg0Rnc2ZUJKVTJ0QUtuZU40UzEwCllBMjQ1YTVTSytEMzFXNStmRkc2 bGc1RkdLazNKV2gxcVdBRERGeXgwQUxRWEZrCitGYlRSNUFsc3dqUW04OCt5NEJH
a1E5UEtQRUYrVmtZSUcvTmVKS2hUQ0UKLS0tIGhvaVhwbDh1MzFhak54RGMxdmw5 N2JoSUFISGIxM3doRy9pdFBRRkEzOFEKLS0tIHJJbVh1RGZQb3krd2NyQ1J3TXpO
QkpzWjVUaGRFdHVuR0FKQUZ3dUlZZ28K3imk+NDfKDkbEo9fs5okgbXMwjiXeJHi MytTbEt4QzlCdENCZlQyT000ZThuM2sKMEjebD+XvT5aLBxzoXRn6x9OKyr7g+en
6pRZW9INVt0y8ovrT2n3MF1esOSpBN2Xsnb9EAHOHc0VjYZoaP6uOw== zEgNDK6IHtypxB9goafmJlYLamESx5eYtwYtZyXNO5a5lKbZHCOe+Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age14ukkn4plvnjacvjux929qwpeynxk4cfxw285vlwddqakm43kfyysfdg02c - recipient: age14ukkn4plvnjacvjux929qwpeynxk4cfxw285vlwddqakm43kfyysfdg02c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdjNqRmdlZFVaYkdwZFd4 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1ZldFNENrMVF3bXFmclhM
UUVwcy84OEtMU1dyam1KWUJEOVUzcVBKUFYwCk13VTFsakN5eUFNTW94dDRmRkVo MldYYVB3ZmVPNVJmTDhBUE53NFlrYkUxK2lNCmRmOTJzM0VOcG1iQkh6dWRDd21h
N0lPWUlEY0xJOFE5YmhHWFYreXUyUFUKLS0tIGxiWVBkbytXOWFIbm5EUVhZaDlp bFRiSGwzS3doRkEvN1hWSTA4YmdSRlEKLS0tIFBxYTluNUY2WVFvYUZ3WWRXZ3Ft
NE1MOFNZSVF1am94N08xa0dHSzkvNDAK8qzdVj6XrNKaAoloxNmJSMmMtmBgtWLf MVJLR3pxWXZENjV2OG5XclpwcWlHU00Kl+EsQMZsU4AggLAckfdsbHYV05AH8isn
h+zmyphDxtgKhsxusKYTKNbv2SK3mta7ej8Lt9lJfQ1ZxY+2kLqT4Q== fHXLacbn8R3Gn/Y+055QAvx4vtDL82gI1EhZzOMOXOG8vPY4R/263Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1vd33efsea2509hm0dwmhkuu7mm2kgw6tsss6lmzsqfg7gat06qyqys3qfh - recipient: age1vd33efsea2509hm0dwmhkuu7mm2kgw6tsss6lmzsqfg7gat06qyqys3qfh
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQWHdNK3JjMlRYNTBPNFJ1 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhbWoyekZWSFMrVml3QktX
cWpjc2VTNHVFcUQ0aER5QjQvdmNic1dyTTFRCjFPUHBEM3NxWEkxc1VHMlgrWWpB L055SDZUellDNkFxNXZrOStmdVoxaURYbWh3Cm95V3JSeCtqOVlCVkVOem1sMWpK
THlIZm5TTjA3SWRhLy9EVTYxblJ2L2MKLS0tIDR4Qkxrd3RVcGxUTjQ5bGttMWxW STd4aVRaTzhsamxpV3hVbjB0bTl6azQKLS0tIHF6eW83WHF4eE9yTEg3RUpKbU1h
RHlHdU8zcTdja2RWZkMvWFFOUjlQVGsKlGrJrMn9WmG/CnzBVrB38UMKQZrJDlfW YklpbjFLbGtVcndKOEN1dVdKWUo2clEK+QctIupLf2ecNMqWzIQFCfXmVmWzfQGU
CBjzcu2tyoTRI57yaSOPemp6Vsn7Rk+UlFDvlUnlACdRyaytZYKjXw== OzBpKIHLg8B/dvFtmpl30xnWJvS7V/QbvK22kHnbI/t5ngbCeHVBew==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age19efecaur72d92g452zpe4uxjtwev2ktjtaezascxg9l2p8544s8s05d93r - recipient: age19efecaur72d92g452zpe4uxjtwev2ktjtaezascxg9l2p8544s8s05d93r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzMU5jRWlPUlgxOXlSdUNp YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpbS80S0ZjeXBKdU1KRTlU
WG5ENCtLbWIzMUZ1dm1pTVQxMS9vM3VET0hRCmZ3UlBmdkw2N1lkajcwRi9SeXVM WG44TDU1cTRPdnExZk5iYjFZTWdGRUpJbHk4Ck54anU1dXdseDFXQ2pyb09RKzBD
R3dKNlA2aW9hVW4wd0QvRTM1MmNDVFEKLS0tIFZIUnpDWnlPN3Fjb2pBcFNmaEtn Q2xCcjUyZU5WdU5INmJNSHJZM2phTW8KLS0tIGJydkVUQnhjbGVyK3cwYTdsV3k5
a1NlN2R1V1BSN0dURzlnaW03WkxEMkkKmstbS8+P6XABmRDngWBhd91HC1pXIm51 Sm9hTUFHTVJiWEtuK21FaGlWaGxWRGcK3ppnyVtA0oY75KbURzMKpNn9QvtG/nQ/
XdiXj2018m1sRUTrJ/Ld1BDgKhKDV0W1in+jvJcmu72GtpXrdsGjSQ== IpRGO6XBDthO35ES402nw2PXBzQB5sss5dc2VTSwgK1M3vAwyHAd5Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1zj3tzzcpyq5s66phlrf2g203am7vl6vxg2jlpr8vy6u385xljapqt0d2fr - recipient: age1zj3tzzcpyq5s66phlrf2g203am7vl6vxg2jlpr8vy6u385xljapqt0d2fr
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Q1o2TjBPYlovNVpQbzIz YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0eG1EbzZCZDI4ajdaV0VL
bW02ZGtqY0UvM1dSN2tMbVNSSk1xQTBYSGlJCjd3MHdISTNEOUp6dTdWRG41RVFI NjFJL1dVVjlVcGlQbUJGR2o3QnQyVjJya2tzCkhKM3Qrb1k3bjBtZkx3Uzc5dVdn
Yit0ZzJUWnNJSHh5ZGQ5cTI2U3lkR0EKLS0tIEJHQTBqYlhZR081Ky9oV2ZwV0ND RHVnbDVNZkdJKzR2YmpFSFNRM2NzOGMKLS0tIFgwR0ZabVhyR0RiREpYMlhFNWN4
OFhGcDMyZUo3b3I5QUpQRmlobVc0SjQKWp5aX115M3h+r0Lk3TrfUUCWTbP2DGMs bDVaczBxVEMrUmxETmdsK0t4MHQrbFkKz2PeQZWcBRfzPafszHiQG8sOLE2/cKvD
zcuSu6S1mCsBZzMrXAnWIvH4Mzq+OnU2LmTv7YsYa9F0zS9DIPxucw== ByIVnZNoOeC0SszjXQABmHYFpqkUU5S4tFG1tZyv2hlIYn3Iwx0iDw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1h7yq7n8gcw35apr7jn8r66dwss4hfcdv0sf4ankfxquyavlrqukqhr0lrc - recipient: age1h7yq7n8gcw35apr7jn8r66dwss4hfcdv0sf4ankfxquyavlrqukqhr0lrc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmWWpNcmdZOGlNck5zbkNj YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaZWRPV3hzTGwzbGVDVG51
T2NpYzQzVmZDM3JpYTRIY0NOMTBZbUUzRDBJCjZqeXJ4UVJIOUJxY1AyZGFDcHQv ZWYwVmM4d1BBVnozTGk4bG5abldVdW5tK0M4Cjl4b1N1STQyNHNGSFI3THlrZzAz
ajF6c0ZKT2laZmc4YXJzS3NRMDV0a3cKLS0tIGRXdWlJd1VMWlJlektqYkl0VDRy N2lzdmZ4YnNoV2RaeTNiTEhybjhFTnMKLS0tIDhIQW1QdHAxUFQ1YU9ZT2Jxd0tu
Y2NSMytpVGZ3QnY4cDdSejBLbTkxWXcKqpqGZDGCntw1Y/T5JmWQcVUoNKeZeLno OFpNSU9nM1pHSG9SR0FmTERXMkFTV0UKAV1wVmoyNHiukTlElQRZVN3p7WBbYMNQ
DPYH/l4t0pO9f5d2alyJGj6GRHThwjbYJksbdbz5+zpVAkSZVsKV0w== Hx+2/3sA3nDE6XtMBRuHReGl6/SXoM6xN5944meMP2AriYblSorWfw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-08-08T15:38:19Z" lastmodified: "2025-08-08T15:38:19Z"
mac: ENC[AES256_GCM,data:IoqrJyCNad4/OFH6y24kYMwnkF3OWfsw77POg00btvw7FoPoaSJ76RySMs6hgWs202bDYSDi44OvbgCVeNPkhe9eyM0gwF0Gf0cE3wirc+qj2qfL9/lMOTZm02WymMglJf6xTcPo3BH00XryR7ptid9+WrB0S2aBVNlcXSBwpzY=,iv:aLI2SyUzWqp/4XFPhogq2vq/u47bs6Gmgc/PRMe+GmM=,tag:jVnW7EkqDRfQluGTiw0olA==,type:str] mac: ENC[AES256_GCM,data:IoqrJyCNad4/OFH6y24kYMwnkF3OWfsw77POg00btvw7FoPoaSJ76RySMs6hgWs202bDYSDi44OvbgCVeNPkhe9eyM0gwF0Gf0cE3wirc+qj2qfL9/lMOTZm02WymMglJf6xTcPo3BH00XryR7ptid9+WrB0S2aBVNlcXSBwpzY=,iv:aLI2SyUzWqp/4XFPhogq2vq/u47bs6Gmgc/PRMe+GmM=,tag:jVnW7EkqDRfQluGTiw0olA==,type:str]
pgp: pgp:
- created_at: "2025-08-08T15:38:00Z" - created_at: "2025-10-19T17:09:58Z"
enc: |- enc: |-
-----BEGIN PGP MESSAGE----- -----BEGIN PGP MESSAGE-----
hQIMAzwtBoBqH5ZOARAAgktfEzwTbSHa/jwfH7KC4mNlUJ4z1d8Q+uVyRckpHTKb hQIMAzwtBoBqH5ZOARAApJ6Ek/s3Ri9fGj0SpbUnYrqXQ7S2KA2sorVcqySH5K+d
3rHgepaVCEpp04fxSaR3f6tBLCQN5QwL49j1zBn6PQYfQ9EHFWc0YJ6VxgyExprV Bro+YGdeFgIXgFWBBKIKkU0EA9mB+D04XQbWkmSvf7FfLYqQROlUvUGeOGIbnpA3
vkQ4u3Z6GQGzJO9jdxUetRYGtHQXzj2SCfPrpS01Jkv2iGbDTPXShP4+R9VyI/UN yXbaqqz2ix7wIOfkgS+m1xYyigmgnU5aBr7Bq/9oPaAusBi9KKZD3gIjhAKvQY50
otMrRYzztfT2d+HWQyeX+j0+CPe8gWO4QH6N6qVcsayPgBLyotpzbCBP3EM6Q5Dq g08Le2VTcYN0m2oC4QYPVspZiMl3h3b2xzBlZltglCJnATg0PQ4vj9X8DZr12s08
OESDJmiDNL9chdwJi8SdlCLclTSzSTISR0zyXdda09EiWGBa5a+YAqpoBd5ui0RI KJZgTBWma2YNCQ/pXytVvA7k2sEXxmdh/7cNEtWoMmWC/x1gjnPVf2z/Ys6+uoHY
A6c2OPut2E9fHMvL02yNPQz2iXCfasJm+ggy3TF5jFDbrkN6Ypddftet3xarZGSD 2E2S+CFq/tFEk7pLXcUFmbQW09LRXSZSmgCDcH2uynWpCep+nSiKuUpzznhoqZNr
Kopu0ipkh/YKydT0q/4LfB9TncXwrVLxiDjfzcvPwvYvWcKjQGXhk+R1ZQkEnZ7y xljuh0tuDtmXVVfdmJonr//NzxYClEtqfrH5MYapLH2yPBE5v311/utogux9dBqd
O60+Ar829cujk/MMAI3ctq9WYawQJ8B4qizU84HPLHHQFHokecjjxO9BgYyBiSvk OkGetGk8BYl2OgNJSNni0hYm0wxLyLdHDYmwyGSUEiZD5c3v8aHStDSv3rY0KQd4
lS2b6vj6cOzEvvehmPE118b01Kz8mBWplVreyUM6bEd+whkZD1H8Q5cWV1tgbs8m TP5J+e1G01jdrdl0YLQqAkiQsnI7lrWIwbX19C+/wT9t9q5PG0H8PuHD7SENUDm5
FqsIHE7V6NWF3Ky9vQCRKiP46IBFYcrnlnxKUgQ6wOE0N8qak6iVqMyl3/itPAwi FST45Wv4PAHNi53HnUTP7pHhSkVnMKKN/vqy1DolxMlEx5W7NrN3Fmw4GQGGAjPa
Hh0hzBxKjHY57ady5I3Cy4JQMn2ojBdTAu0Syf6XltlJfReay16AibWTiBwU/JvS 30GSlti8H7sBfwR79sLK9KLY1XsaM9J9ldFvg0wQib8O3vhCM9lobWp3rUlIW6PS
XgHhag7zrl1Hka8xzvFeOOtkgbHZ8Djx8njJiJVMM74BJ43dZbtLsaEYhpVdaMxy XgFIqpUBa3KHz4pw5gpB9LQ98V+smo6ZgwKXy2YsFdi9bvTE3PhycEl67A5awo3C
091M+tC5h2Gtfb3/wtI5VtybjeSl+bpEdUBleAuL3GkPt5siD9Q9C1QGte41stE= mzOqESujdSjKpyaxbTGutA7Sfhhv8XBY/RBtcCdbGRXD7SJc3qGX0wUCz5K+y9k=
=OBBl =3N1+
-----END PGP MESSAGE----- -----END PGP MESSAGE-----
fp: 58EF8D71114EF548DEE3320DE6F04916B6EEBD83 fp: 58EF8D71114EF548DEE3320DE6F04916B6EEBD83
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted