From 7edf0a8c3d1e6fc420e59859aca77e396cdaa39a Mon Sep 17 00:00:00 2001
From: Maurice <maurice.golverdingen@infosupport.com>
Date: Fri, 3 Oct 2025 12:11:49 +0200
Subject: [PATCH] Update

---
 services/firewall/rules.nft  | 10 +++++-----
 services/minecraft/update.sh | 13 ++++++++-----
 services/nfs/install.sh      | 19 +++++++++++++++++++
 3 files changed, 32 insertions(+), 10 deletions(-)
 create mode 100644 services/nfs/install.sh

diff --git a/services/firewall/rules.nft b/services/firewall/rules.nft
index 3aa9234..c555626 100644
--- a/services/firewall/rules.nft
+++ b/services/firewall/rules.nft
@@ -76,11 +76,11 @@ table inet firewall {
     udp dport { 67, 68, 784 } accept
     tcp dport { 853 } accept
 
-    # Allow DNS from LAN and VPN
-    ip saddr { $lan_net, $vpn_net } udp dport 53 accept
-    ip6 saddr $lan_net6 udp dport 53 accept
-    ip saddr { $lan_net, $vpn_net } tcp dport 53 accept
-    ip6 saddr $lan_net6 tcp dport 53 accept
+    # Allow DNS, NFS from LAN and VPN
+    ip saddr { $lan_net, $vpn_net } udp dport { 53, 2049 } accept
+    ip6 saddr $lan_net6 udp dport { 53, 2049 } accept
+    ip saddr { $lan_net, $vpn_net } tcp dport { 53, 2049 } accept
+    ip6 saddr $lan_net6 tcp dport { 53, 2049 } accept
 
     # Allow Minecraft server access from LAN and VPN
     ip saddr { $lan_net, $vpn_net } tcp dport 25565 accept
diff --git a/services/minecraft/update.sh b/services/minecraft/update.sh
index 48f80b1..52a5554 100644
--- a/services/minecraft/update.sh
+++ b/services/minecraft/update.sh
@@ -1,6 +1,4 @@
 #!/bin/sh
-mkdir -p /var/containers/minecraft
-chmod +x /etc/init.d/minecraft.service
 
 # Plugin list:
 # - FastAsyncWorldEdit (https://ci.athion.net/job/FastAsyncWorldEdit/)
@@ -14,7 +12,12 @@ chmod +x /etc/init.d/minecraft.service
 # - Multiverse Inventories (Hangar)
 # - KeepChunks (Hangar)
 
-cp -rf ./config /var/containers/minecraft
-cp -rf ./plugins /var/containers/minecraft/plugins
+if [ "$1" = "install" ]; then
+    mkdir -p /var/containers/minecraft
+    chmod +x /etc/init.d/minecraft.service
 
-chown -R podman:podman /var/containers/minecraft
\ No newline at end of file
+    cp -r ./config /var/containers/minecraft
+    cp -r ./plugins /var/containers/minecraft/plugins
+
+    chown -R podman:podman /var/containers/minecraft
+fi
\ No newline at end of file
diff --git a/services/nfs/install.sh b/services/nfs/install.sh
new file mode 100644
index 0000000..a4180be
--- /dev/null
+++ b/services/nfs/install.sh
@@ -0,0 +1,19 @@
+#!/bin/sh
+echo "Installing NFS server..."
+apk add nfs-utils
+
+# Make mount point directory for sharing
+mkdir /mnt/shared
+chmod 777 /mnt/shared
+chown nobody:nobody /mnt/shared
+
+# Mount /mnt/shared for all IPs, read-write, root users NOT allowed
+# nohide: allows nested exports (doesnt hide a folder shared inside another shared folder)
+cat << EOF > /etc/exports
+/mnt/shared *(rw,nohide,sync,no_subtree_check,root_squash)
+EOF
+
+# Enable and start NFS server
+exportfs -afv
+rc-update add nfs
+rc-service nfs start
\ No newline at end of file