From 85f8932908ed50122922409739fd1169efba7811 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Mon, 22 Jul 2024 13:26:53 +0200
Subject: [PATCH] minecraft-server: init

---
 flake.nix                     |  1 +
 modules/minecraft/default.nix | 13 +++++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 modules/minecraft/default.nix

diff --git a/flake.nix b/flake.nix
index badd3c2..fe35311 100755
--- a/flake.nix
+++ b/flake.nix
@@ -77,6 +77,7 @@
             ./modules/courses
             ./modules/wiki
             ./modules/matrix
+            ./modules/minecraft
 
             ./modules/nix-serve.nix
             ./modules/hedgedoc.nix
diff --git a/modules/minecraft/default.nix b/modules/minecraft/default.nix
new file mode 100644
index 0000000..a06ec01
--- /dev/null
+++ b/modules/minecraft/default.nix
@@ -0,0 +1,13 @@
+{ ... }:
+{
+  services.minecraft-server = {
+    enable = true;
+    eula = true;
+  };
+
+  networking.firewall = {
+    extraInputRules = ''
+      ip saddr { 141.30.0.0/16, 141.76.0.0/16} tcp dport 25565 accept comment "Allow ldaps access from office nets and podman"
+    '';
+  };
+}