From 5b9d15b2cedc57301a554263249d941379042388 Mon Sep 17 00:00:00 2001
From: blake <me@blakedheld.xyz>
Date: Wed, 1 Jul 2026 23:15:17 -0500
Subject: [PATCH] update craftoria port add voicechat

---
 hosts/nixos/vaniville/configuration.nix | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/hosts/nixos/vaniville/configuration.nix b/hosts/nixos/vaniville/configuration.nix
index 4d405e3..9ee7ed8 100644
--- a/hosts/nixos/vaniville/configuration.nix
+++ b/hosts/nixos/vaniville/configuration.nix
@@ -112,7 +112,7 @@ in {
     # what actually does the forwarding
     firewall = {
       enable = true;
-      allowedTCPPorts = [22 80 443 25777 25579 7567 21115 21116 21117 21118 21119];
+      allowedTCPPorts = [22 80 443 25777 25579 25580 7567 21115 21116 21117 21118 21119];
       # tailscale will also need its UDP port open:
       allowedUDPPorts = [config.services.tailscale.port 25777 21116];
       trustedInterfaces = ["tailscale0"];
@@ -131,13 +131,15 @@ in {
         iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 7567 -j DNAT --to-destination ${lumiose_ip}:7567    # gitea ssh
         iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25777 -j DNAT --to-destination ${lumiose_ip}:25777  # recpro mc
         iptables -t nat -A PREROUTING -i eth0 -p udp --dport 25777 -j DNAT --to-destination ${lumiose_ip}:25777  # recpro mc
-        iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25778 -j DNAT --to-destination ${snowbelle_ip}:25579  # craftoria mc
+        iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25579 -j DNAT --to-destination ${snowbelle_ip}:25579  # craftoria mc
+        iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25580 -j DNAT --to-destination ${snowbelle_ip}:25580  # craftoria mc voice chat
 
         # SNAT: ensure replies go back through VPS tailscale IP
         iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 7567 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4}   # gitea ssh
         iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 25777 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4}  # recpro mc
         iptables -t nat -A POSTROUTING -o tailscale0 -p udp --dport 25777 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4}  # recpro mc
         iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 25579 -d ${snowbelle_ip}/32 -j SNAT --to-source ${vpsip4}  # craftoria mc
+        iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 25580 -d ${snowbelle_ip}/32 -j SNAT --to-source ${vpsip4}  # craftoria mc voicechat
       '';
     };
   };