fucking minecraft 😭

2025-10-10 02:06:54 -05:00
parent 1e8039d1c1
commit dd896748ab
24 changed files with 629 additions and 10 deletions
--- a/modules/homelab/gameservers/minecraft_recpro/default.nix
+++ b/modules/homelab/gameservers/minecraft_recpro/default.nix
@@ -0,0 +1,105 @@
+{ pkgs, config, lib, ... }:
+
+let
+  service = "minecraft_recpro";
+  cfg = config.modules.gameservers.${service};
+  sec = config.sops.secrets;
+  servers = {
+    velocity = { data_dir = "/var/lib/gameserver/minecraft_recpro/velocity"; ram = "2G"; };
+    smp = { data_dir = "/var/lib/gameserver/minecraft_recpro/smp"; ram = "12G"; };
+    superflat = { data_dir = "/var/lib/gameserver/minecraft_recpro/superflat"; ram = "4G"; };
+    bento = { data_dir = "/var/lib/gameserver/minecraft_recpro"; ram = "2G"; };
+  };
+in
+{
+  options.modules.gameservers.${service} = {
+    enable = lib.mkEnableOption "enables ${service}";
+    url = lib.mkOption {
+      type = lib.types.str;
+      default = "mc.recoil.pro";
+      description = "set domain for ${service}";
+    };
+    data_dir = lib.mkOption {
+      type = lib.types.str;
+      default = "/var/lib/gameservers/${service}";
+      description = "set data directory for ${service}";
+    };
+    ids = lib.mkOption {
+      type = lib.types.int;
+      default = 25565;
+      description = "set uid and pid of ${service} user (matches port by default)";
+    };
+    backup = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      description = "enable backups for ${service}";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    
+    # declare ${service} group
+    users.groups.minecraft = { gid = lib.mkForce cfg.ids; };
+
+    # declare ${service} user
+    users.users.minecraft = {
+      description = "minecraft server user";
+      uid = lib.mkForce cfg.ids;
+      isSystemUser = true;
+      group = "minecraft";
+      extraGroups = [];
+    };
+
+    systemd.tmpfiles.rules = lib.concatStringsSep "\n" (mapAttrsToList (name: cfg:
+      "d ${cfg.data_dir} 0755 minecraft minecraft -") servers);
+
+    # Create a systemd service per server running in tmux
+    systemd.services = lib.attrsets.mapAttrs (name: srv: {
+      description = "minecraft_recpro: ${name}";
+      after = [ "network.target" ];
+      wants = [ "network.target" ];
+      serviceConfig = {
+        User = "minecraft";
+        WorkingDirectory = srv.data_dir;
+        ExecStart = "${pkgs.tmux}/bin/tmux new-session -d -s ${name} '${pkgs.openjdk21}/bin/java -Xmx${srv.ram} -jar ${srv.data_dir}/server.jar nogui'";
+        ExecStop = "${pkgs.tmux}/bin/tmux send-keys -t ${name} C-c"; # stop server by sending Ctrl+C to tmux session
+        Restart = "on-failure";
+        KillMode = "process";
+      };
+      wantedBy = [ "multi-user.target" ];
+      UMask = "0007";
+    }) servers;
+
+    # open firewall
+    networking.firewall.allowedTCPPorts = [ 25777 25565 25566 25567 ];
+
+#    # internal reverse proxy entry
+#    services.nginx.virtualHosts."${cfg.url}" = {
+#      forceSSL = true;
+#      sslCertificate = sec."ssl_blakedheld_crt".path;
+#      sslCertificateKey = sec."ssl_blakedheld_key".path;
+#      locations."/" = {
+#        proxyPass = "http://127.0.0.1:${toString cfg.port}";
+#      };
+#    };
+#     # external reverse proxy entry
+#     services.nginx.virtualHosts."${service}.blakedheld.xyz" = {
+#      forceSSL = true;
+#      sslCertificate = sec."ssl_blakedheld_crt".path;
+#      sslCertificateKey = sec."ssl_blakedheld_key".path;
+#      locations."/" = {
+#        proxyPass = "http://127.0.0.1:${toString cfg.port}";
+#      };
+#    };
+#
+#    sops.secrets = {
+#      "${service}_" = {
+#        owner = "${service}";
+#        group = "${service}";
+#      };
+#    };
+
+     # add to backups
+     modules.system.backups.paths = lib.mkIf cfg.backup [ cfg.data_dir ];
+  };
+}