Merge pull request 'Fix: Import pkgs and improve security' (#8) from server1_minecraft into server1

Reviewed-on: https://git.sils.li/vhack.eu/nixos-server/pulls/8
Reviewed-by: ene <ene@sils.li>

1 files changed, 12 insertions, 4 deletions

diff --git a/services/minecraft.nix b/services/minecraft.nix
index aec2f62..5882d9a 100644
--- a/services/minecraft.nix
+++ b/services/minecraft.nix
@@ -1,6 +1,14 @@
-{config, ...}: {
-  users.users.minecraft = {
-    isSystemUser = true;
+{
+  config,
+  pkgs,
+  ...
+}: {
+  users = {
+    groups.minecraft = {};
+    users.minecraft = {
+      isSystemUser = true;
+      group = "minecraft";
+    };
   };
   systemd.services.minecraft = {
     wantedBy = "multi-user.target";
@@ -9,7 +17,7 @@
     serviceConfig = {
       WorkingDirectory = "/srv/minecraft";
       User = "minecraft";
-      Group = "nogroup";
+      Group = "minecraft";
       Restart = "always";
       ExecStart = "${pkgs.openjdk}/bin/java -Xms10G -Xmx10G -XX:+UseG1GC -XX:+ParallelRefProcEnabled -XX:MaxGCPauseMillis=200 -XX:+UnlockExperimentalVMOptions -XX:+DisableExplicitGC -XX:+AlwaysPreTouch -XX:G1NewSizePercent=30 -XX:G1MaxNewSizePercent=40 -XX:G1HeapRegionSize=8M -XX:G1ReservePercent=20 -XX:G1HeapWastePercent=5 -XX:G1MixedGCCountTarget=4 -XX:InitiatingHeapOccupancyPercent=15 -XX:G1MixedGCLiveThresholdPercent=90 -XX:G1RSetUpdatingPauseTimePercent=5 -XX:SurvivorRatio=32 -XX:+PerfDisableSharedMem -XX:MaxTenuringThreshold=1 -Dusing.aikars.flags=https://mcflags.emc.gs -Daikars.new.flags=true -jar paper.jar --nogui";
       SyslogIdentifier = "minecraft-server";