sort out the jar situation

modules/gameservers/minecraft_modded/default.nix

@@ -52,6 +52,8 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    users.groups.minecraft = {gid = lib.mkForce cfg.ids;};
+
     # declare ${service} user
     users.users.minecraft = lib.mkDefault {
       description = "minecraft server user";
@@ -80,7 +82,8 @@ in {
           WorkingDirectory = srv.data_dir;
           UMask = "0007";
           #ExecStart = "${pkgs.openjdk21}/bin/java -Xms4G -Xmx12G -XX:+UseG1GC -XX:+ParallelRefProcEnabled -XX:MaxGCPauseMillis=200 -XX:+UnlockExperimentalVMOptions -XX:+AlwaysPreTouch -XX:G1NewSizePercent=30 -XX:G1MaxNewSizePercent=40 -XX:G1HeapRegionSize=8M -XX:G1ReservePercent=20 -XX:G1HeapWastePercent=5 -XX:G1MixedGCCountTarget=4 -XX:InitiatingHeapOccupancyPercent=15 -XX:G1MixedGCLiveThresholdPercent=90 -XX:G1RSetUpdatingPauseTimePercent=5 -XX:SurvivorRatio=32 -XX:+PerfDisableSharedMem -XX:MaxTenuringThreshold=1 -Dusing.aikars.flags=https://mcflags.emc.gs -Daikars.new.flags=true @libraries/net/neoforged/neoforge/21.1.211/unix_args.txt";
-          ExecStart = "${srv.data_dir}/${srv.start_file}";
+          #ExecStart = "${srv.data_dir}/${srv.start_file}";
+          ExecStart = "${pkgs.openjdk21}/bin/java -Xms4G -Xmx24G -jar serverstarter-2.4.1.jar";
           Restart = "on-failure";
           KillMode = "process";
         };
@@ -110,18 +113,12 @@ in {
     # open firewall
     networking.firewall.allowedTCPPorts = [25779];
 
-    #    sops.secrets = {
-    #      "velocity_forwarding" = {
-    #        owner = "minecraft";
-    #        group = "minecraft";
-    #        path = "/var/lib/gameservers/minecraft_recpro/velocity/forwarding.secret";
-    #        mode = "0400";
-    #      };
-    #      "minecraft_recpro_db_passwd" = {
-    #        owner = "mysql";
-    #        group = "mysql";
-    #      };
-    #    };
+    sops.secrets = {
+      "borg_passwd" = {
+        owner = "root";
+        group = "root";
+      };
+    };
 
     # backups minecraft_modded with borg!
     services.borgbackup.jobs.${service} = {