dont publish rcon port

1 files changed, 5 insertions, 1 deletions

diff --git a/minecraft.nix b/minecraft.nix
index 8146b30..1926923 100644
--- a/minecraft.nix
+++ b/minecraft.nix
@@ -10,11 +10,15 @@ in {
 
   environment.systemPackages = [ pkgs.mcrcon ];
 
+  networking.firewall.allowedTCPPorts = [ 25565 ];
+  networking.firewall.allowedUDPPorts = [ 25565 ];
+
   services.minecraft-server = {
     enable = true;
     package = unstable.minecraft-server;
     eula = true;
-    openFirewall = true; 
+    # openFirewall would also open rcon.port, so open the game port by hand
+    openFirewall = false;
     declarative = true;
     whitelist = {
       mr_5aturn = "2b811fad-e419-401e-9185-70ab279219b5";