Update

services/firewall/rules.nft

@@ -76,11 +76,11 @@ table inet firewall {
     udp dport { 67, 68, 784 } accept
     tcp dport { 853 } accept
 
-    # Allow DNS from LAN and VPN
-    ip saddr { $lan_net, $vpn_net } udp dport 53 accept
-    ip6 saddr $lan_net6 udp dport 53 accept
-    ip saddr { $lan_net, $vpn_net } tcp dport 53 accept
-    ip6 saddr $lan_net6 tcp dport 53 accept
+    # Allow DNS, NFS from LAN and VPN
+    ip saddr { $lan_net, $vpn_net } udp dport { 53, 2049 } accept
+    ip6 saddr $lan_net6 udp dport { 53, 2049 } accept
+    ip saddr { $lan_net, $vpn_net } tcp dport { 53, 2049 } accept
+    ip6 saddr $lan_net6 tcp dport { 53, 2049 } accept
 
     # Allow Minecraft server access from LAN and VPN
     ip saddr { $lan_net, $vpn_net } tcp dport 25565 accept

services/minecraft/update.sh

@@ -1,6 +1,4 @@
 #!/bin/sh
-mkdir -p /var/containers/minecraft
-chmod +x /etc/init.d/minecraft.service
 
 # Plugin list:
 # - FastAsyncWorldEdit (https://ci.athion.net/job/FastAsyncWorldEdit/)
@@ -14,7 +12,12 @@ chmod +x /etc/init.d/minecraft.service
 # - Multiverse Inventories (Hangar)
 # - KeepChunks (Hangar)
 
-cp -rf ./config /var/containers/minecraft
-cp -rf ./plugins /var/containers/minecraft/plugins
+if [ "$1" = "install" ]; then
+    mkdir -p /var/containers/minecraft
+    chmod +x /etc/init.d/minecraft.service
 
-chown -R podman:podman /var/containers/minecraft
+    cp -r ./config /var/containers/minecraft
+    cp -r ./plugins /var/containers/minecraft/plugins
+
+    chown -R podman:podman /var/containers/minecraft
+fi

services/nfs/install.sh

@@ -0,0 +1,19 @@
+#!/bin/sh
+echo "Installing NFS server..."
+apk add nfs-utils
+
+# Make mount point directory for sharing
+mkdir /mnt/shared
+chmod 777 /mnt/shared
+chown nobody:nobody /mnt/shared
+
+# Mount /mnt/shared for all IPs, read-write, root users NOT allowed
+# nohide: allows nested exports (doesnt hide a folder shared inside another shared folder)
+cat << EOF > /etc/exports
+/mnt/shared *(rw,nohide,sync,no_subtree_check,root_squash)
+EOF
+
+# Enable and start NFS server
+exportfs -afv
+rc-update add nfs
+rc-service nfs start