From e6dfc2aba453cb88f9ed51b76eace3f9dd3bc191 Mon Sep 17 00:00:00 2001
From: Menno van Leeuwen <menno@vleeuwen.me>
Date: Sat, 16 Nov 2024 02:03:20 +0100
Subject: [PATCH] adds allowedTCPPorts for Minecraft and updates
 allowedTCPPorts for internal and media services

---
 config/nixos/common/server.nix | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/config/nixos/common/server.nix b/config/nixos/common/server.nix
index 4432671..f44e212 100644
--- a/config/nixos/common/server.nix
+++ b/config/nixos/common/server.nix
@@ -20,18 +20,20 @@
   networking.firewall = {
     enable = true;
     allowedTCPPorts = [
-      400 # SSH
       80 # HTTP
       443 # HTTPS
 
       22 # Git over SSH
-      32400 # Plex
+      400 # SSH
+      25565 # Minecraft
+      3456 # Minecraft (Bluemap)
 
       # Interal services
       81 # Nginx Proxy Manager
       7788 # Sabnzbd
       8085 # Qbittorrent
       3030 # Gitea
+      5080 # Factorio Server Manager
 
       # Arr services
       5555 # Overseerr
@@ -41,6 +43,10 @@
       8989 # Sonarr
       8386 # Whisparr
       8191 # Flaresolerr
+
+      # Media services
+      32400 # Plex
+      9999 # Stash
     ];
     allowedUDPPorts = [
       51820 # WireGuard