godot/mc-perfect
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

cleaning up after big update

Browse Source
This commit is contained in:
godot 2024-07-15 21:18:37 +02:00
parent e18448d1d5
commit 0754d8585d
2 changed files with 32 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

53
script.sh
View File

@ -80,11 +80,7 @@ java -Xms512M -Xmx2048M -jar Forge-1.20.1.jar --installServer
cd - cd -
mv eula.txt /opt/minecraft/ mv eula.txt server-icon.png server.properties run.sh /opt/minecraft/
mv server-icon.png /opt/minecraft/
mv server.properties /opt/minecraft/
mv run.sh /opt/minecraft
mkdir /opt/minecraft/mods mkdir /opt/minecraft/mods
@ -93,52 +89,59 @@ printf "\n+ Unpacking mods \n \n"
7z x Mods.zip -o/opt/minecraft/mods/ 7z x Mods.zip -o/opt/minecraft/mods/
# Permision handeling # Permision handeling
printf "\n+ Permision handeling" printf "\n+ Permision handeling\n"
chown -R minecraft:minecraft /opt/minecraft chown -R minecraft:minecraft /opt/minecraft
# SystemD service # SystemD service
printf "+ Preparign systemD service" printf "+ Preparign systemD service\n"
cp mc-forge.service /etc/systemd/system/ cp mc-forge.service /etc/systemd/system/
systemctl daemon-reload systemctl daemon-reload
systemctl start mc-forge.service systemctl start mc-forge.service
systemctl enable mc-forge systemctl enable mc-forge
# integration of Maxopoly's instructions on firewall # integration of Maxopoly's instructions on firewall
if [[ "n" != "$ansFirewallSetup" ]]; then if [[ "$ansFirewallSetup" =~ ("Y"|"y") || -z "$ansFirewallSetup" ]]; then
printf "+ Executing firewall setup" printf "+ Executing firewall setup"
iptables -P INPUT ACCEPT #Clears existing rules iptables -P INPUT ACCEPT #Clears existing rules
iptables -A INPUT -i lo -j ACCEPT #Allow loopback iptables -A INPUT -i lo -j ACCEPT #Allow loopback
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT #Allow continuing connections iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT #Allow continuing connections
iptables -A INPUT -p tcp --dport 22 --source 172.18.42.0/24 -j ACCEPT #Allow ssh from set network iptables -A INPUT -p tcp --dport 22 --source $ipList -j ACCEPT #Allow ssh from set network
iptables -A INPUT -p tcp --dport 25565 -j ACCEPT #Allow MC port iptables -A INPUT -p tcp --dport 25565 -j ACCEPT #Allow MC port
iptables -L ### Good place to paste a manual check to not lock yourself out
iptables -L ### Good place to paste a manual check to not lock yourself out printf "\n Does it looks right? [Y/n]: "
read ansFirewallOK
printf "\n Does it looks right? [Y/n]: " if [[ "$ansFirewallOK" =~ ("Y"|"y") || -z "$ansFirewallOK" ]]; then
read ansFirewallOK
iptables -P INPUT DROP #Disallow everythink else
if [[ "n" != "$ansFirewallOK" ]]; then iptables -P FORWARD DROP #Block all forwarding
iptables -P INPUT DROP #Disallow everythink else iptables -P OUTPUT ACCEPT #Allow all outgouing
iptables -P FORWARD DROP #Block all forwarding else
iptables -P OUTPUT ACCEPT #Allow all outgouing printf "\nOK it is time for manual configuration"
fi printf "\nAfter you are done ramamber to run 'apt install iptables-persistent' to save your config. System will automaticly remove your work after restart"
apt install iptables-persistent -y fi
apt install iptables-persistent -y
fi fi
printf "\n+ Done, thanks for your time. It is goode idea to chack if everythink is alright by running:"
printf "\nsystemctl status mc-forge"
printf "\nu minecraft -s /bin/bash"
printf "\n+ it is good idea to have some fun with screen before trying to open minecraft conesole 'screen -r' while loged wia minecraft user"

2
server.properties
View File

@ -10,7 +10,7 @@ enable-jmx-monitoring=false
enable-query=false enable-query=false
enable-rcon=false enable-rcon=false
enable-status=true enable-status=true
enforce-secure-profile=true enforce-secure-profile=false
enforce-whitelist=false enforce-whitelist=false
entity-broadcast-range-percentage=100 entity-broadcast-range-percentage=100
force-gamemode=false force-gamemode=false