etna: add atm8 server

secrets/etna/minecraftEnv.age

@@ -0,0 +1,12 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----

secrets/secrets.nix

@@ -18,4 +18,5 @@ in {
   "etna/apiRsEnv.age".publicKeys = main ++ [etna];
   "etna/ukubotRsEnv.age".publicKeys = main ++ [etna];
   "etna/ngrokEnv.age".publicKeys = main ++ [etna];
+  "etna/minecraftEnv.age".publicKeys = main ++ [etna];
 }

systems/etna/default.nix

@@ -15,10 +15,13 @@
     apiRsEnv.file = "${path}/apiRsEnv.age";
     ukubotRsEnv.file = "${path}/ukubotRsEnv.age";
     ngrokEnv.file = "${path}/ngrokEnv.age";
+    minecraftEnv.file = "${path}/minecraftEnv.age";
   };
 
   boot.loader.systemd-boot.enable = true;
 
+  networking.firewall.allowedTCPPorts = [4040];
+
   services = {
     api-rs = {
       enable = true;
@@ -54,6 +57,25 @@
       };
     };
 
+    frp = {
+      enable = true;
+      role = "client";
+      settings = {
+        serverAddr = "45.10.154.114";
+        serverPort = 7000;
+
+        proxies = [
+          {
+            name = "minecraft";
+            type = "tcp";
+            localIp = "127.0.0.1";
+            localPort = 25565;
+            remotePort = 6000;
+          }
+        ];
+      };
+    };
+
     cloudflared = {
       enable = true;
       tunnels."57f51ad7-25a0-45f3-b113-0b6ae0b2c3e5" = {
@@ -98,4 +120,25 @@
       };
     };
   };
+
+  virtualisation.oci-containers.containers = {
+    "minecraft" = {
+      image = "itzg/minecraft-server";
+      ports = ["25565:25565"];
+      volumes = [
+        "/data/minecraft:/data"
+        "/data/downloads:/downloads"
+      ];
+      environmentFiles = [
+        config.age.secrets.minecraftEnv.path
+      ];
+      environment = {
+        EULA = "true";
+        MEMORY = "12G";
+        TYPE = "AUTO_CURSEFORGE";
+        CF_SLUG = "all-the-mods-8";
+        CF_FILE_ID = "4962718";
+      };
+    };
+  };
 }