summary refs log tree commit diff stats
diff options
context:
space:
mode:
authorsils <sils@sils.li>2023-01-15 20:35:21 +0100
committersils <sils@sils.li>2023-01-15 20:35:21 +0100
commite63bcf72da136689c8ba5b73b274bbb822958383 (patch)
tree3df2cb4e1bf8764053d54f42a18f6cbba2d499f0
parentFix: Import pkgs (diff)
downloadnixos-server-e63bcf72da136689c8ba5b73b274bbb822958383.tar.gz
nixos-server-e63bcf72da136689c8ba5b73b274bbb822958383.zip
Sec: Add minecraft group
Diffstat (limited to '')
-rw-r--r--services/minecraft.nix10
1 files changed, 7 insertions, 3 deletions
diff --git a/services/minecraft.nix b/services/minecraft.nix
index a45ff34..5882d9a 100644
--- a/services/minecraft.nix
+++ b/services/minecraft.nix
@@ -3,8 +3,12 @@
   pkgs,
   ...
 }: {
-  users.users.minecraft = {
-    isSystemUser = true;
+  users = {
+    groups.minecraft = {};
+    users.minecraft = {
+      isSystemUser = true;
+      group = "minecraft";
+    };
   };
   systemd.services.minecraft = {
     wantedBy = "multi-user.target";
@@ -13,7 +17,7 @@
     serviceConfig = {
       WorkingDirectory = "/srv/minecraft";
       User = "minecraft";
-      Group = "nogroup";
+      Group = "minecraft";
       Restart = "always";
       ExecStart = "${pkgs.openjdk}/bin/java -Xms10G -Xmx10G -XX:+UseG1GC -XX:+ParallelRefProcEnabled -XX:MaxGCPauseMillis=200 -XX:+UnlockExperimentalVMOptions -XX:+DisableExplicitGC -XX:+AlwaysPreTouch -XX:G1NewSizePercent=30 -XX:G1MaxNewSizePercent=40 -XX:G1HeapRegionSize=8M -XX:G1ReservePercent=20 -XX:G1HeapWastePercent=5 -XX:G1MixedGCCountTarget=4 -XX:InitiatingHeapOccupancyPercent=15 -XX:G1MixedGCLiveThresholdPercent=90 -XX:G1RSetUpdatingPauseTimePercent=5 -XX:SurvivorRatio=32 -XX:+PerfDisableSharedMem -XX:MaxTenuringThreshold=1 -Dusing.aikars.flags=https://mcflags.emc.gs -Daikars.new.flags=true -jar paper.jar --nogui";
       SyslogIdentifier = "minecraft-server";