add srcds

flake.nix

@@ -61,6 +61,7 @@
       url = "github:lytedev/slippi-nix";
       inputs.nixpkgs.follows = "nixpkgs-unstable";
     };
+    srcds-nix.url = "github:ihaveamac/srcds.nix";
   };
   outputs = {
     self,

hosts/nixos/lumiose/configuration.nix

@@ -17,7 +17,7 @@
     ../../../modules/system
     ../../../modules/fileshares/holocron_new
     ../../../modules/homelab
-    ../../../modules/gameservers/cs2
+    ../../../modules/gameservers/srcds
     #../../../modules/gameservers/minecraft_recpro
     #../../../modules/gameservers/minecraft_modded
   ];
@@ -84,7 +84,7 @@
   };
 
   gameservers = {
-    cs2.enable = true;
+    srcds.enable = true;
   };
 
   # boot (systemd is going on me)

modules/gameservers/cs2/default.nix

@@ -17,6 +17,10 @@ in {
       type = lib.types.int;
       default = 27015;
     };
+    tv_port = lib.mkOption {
+      type = lib.types.int;
+      default = 27016;
+    };
     hostname = lib.mkOption {
       type = lib.types.str;
       default = "recoil.pro CS2";
@@ -25,7 +29,7 @@ in {
       type = lib.types.str;
       default = "de_dust2";
     };
-    maxPlayers = lib.mkOption {
+    max_players = lib.mkOption {
       type = lib.types.int;
       default = 10;
     };
@@ -51,6 +55,8 @@ in {
 
     environment.systemPackages = with pkgs; [
       steamcmd
+      steam-run
+      rcon
     ];
 
     systemd.tmpfiles.rules = [
@@ -61,7 +67,6 @@ in {
     environment.etc."cs2/server.cfg".text = ''
       hostname "${cfg.hostname}"
       sv_lan 0
-      sv_visiblemaxplayers ${toString cfg.maxPlayers}
       rcon_password "$(<${config.sops.secrets."cs2/rcon".path})"
       mp_autoteambalance 1
       mp_limitteams 2
@@ -95,22 +100,30 @@ in {
       serviceConfig = {
         User = "cs2";
         Group = "cs2";
-        WorkingDirectory = "${cfg.data_dir}/server/game/bin/linuxsteamrt64";
+        WorkingDirectory = "${cfg.data_dir}";
         Restart = "always";
         ExecStart = pkgs.writeShellScript "cs2-start" ''
           export GSLT=$(cat ${config.sops.secrets."cs2/gslt".path})
-          exec ./cs2.sh \
+          exec ${pkgs.steam-run}/bin/steam-run -- \
+            ${cfg.data_dir}/server/game/bin/linuxsteamrt64/cs2 \
             -dedicated \
             -usercon \
+            -console \
+            -port ${toString cfg.port} \
+            -tv_port ${toString cfg.tv_port} \
+            -maxplayers_override ${toString cfg.max_players} \
+            +game_type 0 \
+            +game_mode 1 \
+            +mapgroup mg_active \
             +map ${cfg.map} \
             +sv_setsteamaccount "$GSLT" \
-            +exec server.cfg
+            +exec /etc/gameserver/cs2/server.cfg
         '';
       };
     };
 
-    networking.firewall.allowedTCPPorts = [cfg.port];
+    networking.firewall.allowedTCPPorts = [cfg.port cfg.tv_port];
-    networking.firewall.allowedUDPPorts = [cfg.port];
+    networking.firewall.allowedUDPPorts = [cfg.port cfg.tv_port];
 
     # backups cs2 server with borg!
     services.borgbackup.jobs.${service} = {

modules/gameservers/srcds/default.nix

@@ -0,0 +1,123 @@
+{
+  pkgs,
+  config,
+  lib,
+  inputs,
+  ...
+}: let
+  service = "srcds";
+  cfg = config.gameservers.${service};
+in {
+  imports = [inputs.srcds-nix.nixosModules.default];
+
+  options.gameservers.${service} = {
+    enable = lib.mkEnableOption "Counter Strike 2 server";
+    data_dir = lib.mkOption {
+      type = lib.types.str;
+      default = "/var/lib/gameservers/cs2";
+    };
+    port = lib.mkOption {
+      type = lib.types.int;
+      default = 27015;
+    };
+    tv_port = lib.mkOption {
+      type = lib.types.int;
+      default = 27016;
+    };
+    hostname = lib.mkOption {
+      type = lib.types.str;
+      default = "recoil.pro CS2";
+    };
+    map = lib.mkOption {
+      type = lib.types.str;
+      default = "de_dust2";
+    };
+    max_players = lib.mkOption {
+      type = lib.types.int;
+      default = 10;
+    };
+    backup = lib.mkOption {
+      type = lib.types.bool;
+      default = true;
+    };
+    backup_repo = lib.mkOption {
+      type = lib.types.path;
+      default = "/holocron/archives/gameservers/cs2";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    users.users.cs2 = {
+      isSystemUser = true;
+      group = "cs2";
+      home = cfg.data_dir;
+      createHome = true;
+    };
+
+    users.groups.cs2 = {};
+
+    services.srcds = {
+      enable = true;
+      openFirewall = true;
+      games = {
+        cs2-server = {
+          appId = 730;
+          gamePort = cfg.port;
+          sourceTV = {
+            enable = true;
+            port = cfg.tv_port;
+          };
+          rcon = {
+            enable = true;
+            password = "secretpass";
+          };
+          extraArgs = [];
+          startingMap = cfg.map;
+          config = {
+            hostname = "recoil.pro cs2 server";
+            sv_password = "recpro727";
+            sv_contact = "me@recoil.pro";
+          };
+        };
+      };
+    };
+
+    environment.systemPackages = with pkgs; [
+      rcon
+    ];
+
+    # backups cs2 server with borg!
+    services.borgbackup.jobs.${service} = {
+      archiveBaseName = service;
+      repo = cfg.backup_repo;
+      paths = cfg.data_dir;
+      compression = "auto,zstd";
+      #preHook = "systemctl start mysql-backup.service";
+      startAt = "*-*-* *:00:00";
+      group = "archives";
+      encryption.mode = "repokey-blake2";
+      encryption.passCommand = "cat ${config.sops.secrets."borg_passwd".path}";
+      extraArgs = ["--verbose" "--show-rc" "--umask" "0007"];
+      extraCreateArgs = ["--list" "--stats" "--filter" "AME"];
+      prune.keep = {
+        within = "1d"; # Keep all archives from the last day
+        hourly = 24;
+        daily = 7;
+        weekly = 12;
+        monthly = -1; # Keep at least one archive for each month
+      };
+    };
+
+    # manage secrets with sops
+    sops.secrets = {
+      "${service}/gslt" = {
+        owner = service;
+        group = service;
+      };
+      "${service}/rcon" = {
+        owner = service;
+        group = service;
+      };
+    };
+  };
+}