infrastructure/machines/public-cof/minecraft.nix

{ lib, pkgs, ... }:
let
  papermc = {
    ram = 4; # In GB
    version = "1.17.1";
    build = 189;
    sha256 = "06g2vs8z7k9bl8asjgdz9h8fkd93xam2lbrgmzgamwjp94gvfvrn";
  };
  port = 25565;
  rconPort = 25575;
in
{
  # Remote administration
  environment.systemPackages = [ pkgs.mcrcon ];

  # Use papermc
  nixpkgs.overlays = [
    (self: super: {
      minecraft-server = super.minecraft-server.overrideAttrs (old: {
        src = pkgs.fetchurl {
          url = with papermc;
            "https://papermc.io/api/v2/projects/paper/versions/${version}/builds/${toString build}/downloads/paper-${version}-${toString build}.jar";
          sha256 = papermc.sha256;
        };
      });
    })
  ];

  services.minecraft-server = {
    enable = true;
    eula = true;
    declarative = true;

    jvmOpts = with papermc;
      "-Xms${toString ram}G -Xmx${toString ram}G -XX:+UseG1GC -XX:+ParallelRefProcEnabled -XX:MaxGCPauseMillis=200 -XX:+UnlockExperimentalVMOptions -XX:+DisableExplicitGC -XX:+AlwaysPreTouch -XX:G1NewSizePercent=30 -XX:G1MaxNewSizePercent=40 -XX:G1HeapRegionSize=8M -XX:G1ReservePercent=20 -XX:G1HeapWastePercent=5 -XX:G1MixedGCCountTarget=4 -XX:InitiatingHeapOccupancyPercent=15 -XX:G1MixedGCLiveThresholdPercent=90 -XX:G1RSetUpdatingPauseTimePercent=5 -XX:SurvivorRatio=32 -XX:+PerfDisableSharedMem -XX:MaxTenuringThreshold=1";

    # To get the uuids: https://mcuuid.net/
    whitelist = {
      gabriel_dr_dl = "53fced49-da51-4c82-b1d0-37168029db08";
      aimie_dodo = "d10be020-a612-47e5-b0d0-938b9a7eb58e";
      RaitoMezarius = "a400686e-0f62-43d5-b5c6-4295babcc008";
    };

    serverProperties = {
      server-port = port;
      difficulty = "normal";
      gamemode = "survival";
      max-players = 42;
      motd = "This is a test and it will break";

      view-distance = 7;

      # Map settings
      level-seed = "9058136630944956755";
      level-name = "Public_COF";

      level-type = "default";
      spawn-animals = true;
      spawn-monsters = true;
      spawn-npcs = true;
      generate-structures = true;

      enable-command-block = false;

      # Whitelist
      white-list = true;
      enforce-whitelist = true;

      # Admin
      enable-rcon = true;
      "rcon.password" =
        ''yQZ>O.%]fB{'E.X=HI1/En~i-''; # TODO Warning: it is written in clear in /var/lib/... with read permissions and mcrcom will transmit it without encryption
      "rcon.port" = rconPort;
      admin-slot = true;

      snoop-enabled = false;
      public = false;

      # enable-jmx-monitoring = true; # https://docs.oracle.com/javase/8/docs/technotes/guides/management/agent.html
    };
  };

  networking.firewall.allowedTCPPorts = [ port ];
  networking.firewall.allowedUDPPorts = [ port ];
}