feat: Added minecraft

nixos/default.nix

@@ -26,6 +26,7 @@
           # inputs.command-runner.nixosModules.command-runner
           inputs.lanzaboote.nixosModules.lanzaboote
           inputs.musnix.nixosModules.musnix
+          inputs.nix-minecraft.nixosModules.minecraft-servers
           {
             nixpkgs.config.allowUnfree = true;
             home-manager = {

nixos/mirai/services/default.nix

@@ -2,26 +2,27 @@
   imports = [
     ./atuin.nix
     ./authelia.nix
-    ./llama.nix
-    ./minecraft.nix
-    ./tailscale.nix
-    ./zerotier.nix
     ./caddy.nix
     ./fail2ban.nix
     ./gitea.nix
     ./homepage.nix
+    ./llama.nix
+    ./minecraft.nix
     ./nextcloud.nix
+    ./tailscale.nix
+    ./zerotier.nix
 
-    # ./navidrome.nix
     # ./home-assistant.nix
     # ./jellyfin.nix
-    # ./polaris.nix
-    # ./syncthing.nix
-    # ./vscode.nix
     # ./ldap.nix
     # ./llama.nix
+    # ./navidrome.nix
     # ./nextcloud.nix
+    # ./paperless.nix
+    # ./polaris.nix
     # ./seafile.nix
+    # ./syncthing.nix
+    # ./vscode.nix
   ];
   services = {
     nix-serve = {

nixos/mirai/services/homepage.nix

@@ -43,6 +43,12 @@
                 href = "https://deluge.tsuba.darksailor.dev";
               };
             }
+            {
+              "Prowlarr" = {
+                description = "Prowlarr";
+                href = "https://prowlarr.tsuba.darksailor.dev";
+              };
+            }
             {
               "Jackett" = {
                 description = "Jackett";

nixos/mirai/services/jellyfin.nix

@@ -2,7 +2,7 @@
   services = {
     jellyfin = {
       enable = false;
-      openFirewall = true;
+      openFirewall = false;
     };
     caddy = {
       virtualHosts."media.darksailor.dev".extraConfig = ''

nixos/mirai/services/minecraft.nix

@@ -1,16 +1,23 @@
-{pkgs, ...}: {
-  services = {
+{
+  pkgs,
+  inputs,
+  ...
+}: {
+  # imports = [inputs.nix-minecraft.nixosModules.minecraft-servers];
+  services = let
+    whitelist = {
+      "AbhinavSE" = "8b6c052e-69b3-4bee-b9dc-12eb94653c9e";
+      "Serveus" = "79882fb6-d594-4073-a3d0-70a01d0abb67";
+      "__Shun__" = "1c7a300f-98e4-402c-8741-432f3494bb25";
+      "shashikant" = "20891e82-203c-4d04-9868-79a5879ecfc3";
+    };
+  in {
     minecraft-server = {
+      inherit whitelist;
       enable = true;
       openFirewall = true;
       eula = true;
       declarative = true;
-      whitelist = {
-        "AbhinavSE" = "8b6c052e-69b3-4bee-b9dc-12eb94653c9e";
-        "Serveus" = "79882fb6-d594-4073-a3d0-70a01d0abb67";
-        "__Shun__" = "1c7a300f-98e4-402c-8741-432f3494bb25";
-        "shashikant" = "20891e82-203c-4d04-9868-79a5879ecfc3";
-      };
       serverProperties = {
         motd = "Servius's Minecraft Server";
         level-seed = "4504535438041489910";
@@ -27,5 +34,23 @@
           jre_headless = getJavaVersion 21;
         };
     };
+    # minecraft-servers = {
+    #   enable = true;
+    #   eula = true;
+    #   openFirewall = true;
+    #   servers.fabric = {
+    #     inherit whitelist;
+    #     enable = true;
+    #     jvmOpts = "-Xmx4G -Xms4G";
+    #     package = pkgs.fabricServers.fabric-1_21_7;
+    #     serverProperties = {
+    #       motd = "Servius's Fabric Minecraft Server";
+    #       server-port = 25567;
+    #       level-seed = "4504535438041489910";
+    #       view-distance = 24;
+    #       white-list = true;
+    #     };
+    #   };
+    # };
   };
 }

nixos/mirai/services/paperless.nix

@@ -0,0 +1,29 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  sops = {
+    secrets."paperless/adminpass".owner = config.users.users.paperless.name;
+  };
+  services = {
+    paperless = {
+      enable = true;
+      passwordFile = config.sops.secrets."paperless/adminpass".path;
+      environmentFile = pkgs.writeText "paperless.env" ''
+        PAPERLESS_ENABLE_HTTP_REMOTE_USER=true
+        PAPERLESS_URL=https://paperless.darksailor.dev
+        PAPERLESS_SECRET_KEY=${config.sops.placeholder."paperless/secret_key"}
+      '';
+    };
+    caddy = {
+      virtualHosts."paperless.darksailor.dev".extraConfig = ''
+        forward_auth localhost:5555 {
+            uri /api/authz/forward-auth
+            copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
+        }
+        reverse_proxy localhost:28981
+      '';
+    };
+  };
+}