Add minecraft server backup

flake.nix

@@ -175,7 +175,7 @@
 
                         networking = {
                             firewall = {
-                                allowedTCPPorts = [ 80 443 3843 4533 6722 7474 7878 8080 8081 8083 8089 8096 8120 8181 8443 8787 8889 8902 8989 8998 9000 9091 9696 11112 24454 25565 25600 ];
+                                allowedTCPPorts = [ 80 443 3000 3843 4533 6600 6722 7474 7878 8000 8080 8081 8083 8089 8096 8120 8181 8443 8787 8889 8902 8989 8998 9000 9091 9696 11112 13378 24454 25565 25600 ];
                                 allowedUDPPorts = [ 3478 10001 ];
                             };
                         };

hosts/diphda/mc-dh-backup.yaml

@@ -1,16 +1,16 @@
 source_directories:
-    - /home/eesim/configs/mc-arcadia
+    - /home/eesim/configs/mc-distant-horizons/
 
 repositories:
-    - path: ssh://fbv1440u@fbv1440u.repo.borgbase.com/./repo
-      label: "Minecraft-Arcadia borgbase"
+    - path: ssh://lxojwl95@lxojwl95.repo.borgbase.com/./repo
+      label: "Minecraft-DH borgbase"
 
 exclude_if_present:
     - .nobackup
 
 compression: auto,zstd
 archive_name_format: '{hostname}-{now:%Y-%m-%d-%H%M%S}'
-encryption_passcommand: 'cat /run/secrets/mc-arcadia/repo_password'
+encryption_passcommand: 'cat /run/secrets/mc-dh/repo_password'
 
 keep_hourly: 24
 keep_daily: 7

hosts/diphda/system.nix

@@ -21,6 +21,7 @@
         age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
 
         secrets."mc-arcadia/repo_password" = {};
+        secrets."mc-dh/repo_password" = {};
         secrets."tandoor/secret_key" = {
             owner = "tandoor";
         };
@@ -31,9 +32,14 @@
             format = "binary";
             sopsFile = ../../secrets/diphda/porkbun.keytab;
         };
+        secrets."caddy-porkbun.keytab" = {
+            format = "binary";
+            sopsFile = ../../secrets/diphda/porkbun.keytab;
+            path = "/home/eesim/configs/caddy/.env";
+        };
     };
 
-    systemd.timers."mc-arcadia-backup" = {
+    systemd.timers."mc-dh-backup" = {
         wantedBy = [ "timers.target" ];
         timerConfig = {
             OnCalendar = "*-*-* *:00:00";
@@ -41,14 +47,14 @@
         };
     };
 
-    systemd.services."mc-arcadia-backup" = {
+    systemd.services."mc-dh-backup" = {
         enable = true;
         preStart = ''
-            ${pkgs.docker}/bin/docker exec mc-arcadia-mc-1 mc-send-to-console say Server backup starting in 5 minutes
+            ${pkgs.docker}/bin/docker exec mc-distant-horizons-mc-1 mc-send-to-console say Server backup starting in 5 minutes
             sleep 5m
         '';
         postStart = ''
-            ${pkgs.docker}/bin/docker exec mc-arcadia-mc-1 mc-send-to-console say Server backup starting
+            ${pkgs.docker}/bin/docker exec mc-distant-horizons-mc-1 mc-send-to-console say Server backup starting
         '';
         serviceConfig = {
             Type = "oneshot"; 
@@ -56,7 +62,7 @@
             ExecStart = ''
                 systemd-inhibit --who="borgmatic" \
                 --why="Prevent interrupting scheduled backup" \
-                ${pkgs.borgmatic}/bin/borgmatic -c /etc/nixos/hosts/diphda/mc-arcadia-backup.yaml --verbosity 1 --syslog-verbosity 1
+                ${pkgs.borgmatic}/bin/borgmatic -c /etc/nixos/hosts/diphda/mc-dh-backup.yaml --verbosity 1 --syslog-verbosity 1
                 '';
         };
     };
@@ -102,6 +108,12 @@
         };
     };
 
+    services.mpd = {
+        enable = true;
+        musicDirectory = "/media/Music";
+        network.listenAddress = "any";
+    };
+
     security.acme = {
         acceptTerms = true;
         defaults.email = "eesimmons9105@gmail.com";