modded i guess
This commit is contained in:
@@ -15,7 +15,7 @@
|
||||
../../../modules/homelab
|
||||
#../../../modules/fileshares/holocron
|
||||
#../../../modules/gameservers/minecraft_recpro
|
||||
#../../../modules/gameservers/minecraft_modded
|
||||
../../../modules/gameservers/minecraft_modded
|
||||
];
|
||||
|
||||
home-manager.users.blake.imports = [
|
||||
@@ -72,7 +72,10 @@
|
||||
|
||||
# gameservers = {
|
||||
# minecraft_recpro.enable = true;
|
||||
# minecraft_modded.enable = true;
|
||||
minecraft_modded = {
|
||||
enable = true;
|
||||
url = "raceraskedforthisenjoyyall.recoil.pro"
|
||||
};
|
||||
# };
|
||||
|
||||
# boot (systemd is going on me)
|
||||
|
||||
@@ -112,7 +112,7 @@ in {
|
||||
# what actually does the forwarding
|
||||
firewall = {
|
||||
enable = true;
|
||||
allowedTCPPorts = [22 80 443 25777 7567 21115 21116 21117 21118 21119];
|
||||
allowedTCPPorts = [22 80 443 25777 25579 7567 21115 21116 21117 21118 21119];
|
||||
# tailscale will also need its UDP port open:
|
||||
allowedUDPPorts = [config.services.tailscale.port 25777 21116];
|
||||
trustedInterfaces = ["tailscale0"];
|
||||
@@ -131,13 +131,13 @@ in {
|
||||
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 7567 -j DNAT --to-destination ${lumiose_ip}:7567 # gitea ssh
|
||||
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25777 -j DNAT --to-destination ${lumiose_ip}:25777 # recpro mc
|
||||
iptables -t nat -A PREROUTING -i eth0 -p udp --dport 25777 -j DNAT --to-destination ${lumiose_ip}:25777 # recpro mc
|
||||
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25778 -j DNAT --to-destination ${lumiose_ip}:25778 # cbblemon mc
|
||||
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25778 -j DNAT --to-destination ${snowbelle_ip}:25779 # craftoria mc
|
||||
|
||||
# SNAT: ensure replies go back through VPS tailscale IP
|
||||
iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 7567 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4} # gitea ssh
|
||||
iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 25777 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4} # recpro mc
|
||||
iptables -t nat -A POSTROUTING -o tailscale0 -p udp --dport 25777 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4} # recpro mc
|
||||
iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 25778 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4} # cbblemon mc
|
||||
iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 25778 -d ${snowbelle_ip}/32 -j SNAT --to-source ${vpsip4} # craftoria mc
|
||||
'';
|
||||
};
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user