desktop: open firewall to wg0

hosts/nullbox/configuration.nix

@@ -12,6 +12,7 @@
       ./hardware-configuration.nix
       # Encryption
       ./luks.nix
+      ./mcserver.nix
     ];
 
   config = {
@@ -21,7 +22,7 @@
         "/ntfs" = {
           fsType = "ntfs-3g";
           device = "/dev/disk/by-uuid/6AC23F0FC23EDF4F";
-          options = [ "auto_cache" ];
+          options = [ "auto_cache" "nofail" ];
         };
         "/.btrfsroot" = {
           options = [ "subvol=/" ];

hosts/nullbox/hardware-configuration.nix

@@ -41,6 +41,12 @@
       fsType = "vfat";
     };
 
+  fileSystems."/srv/mcserver" =
+    { device = "/dev/disk/by-uuid/7204ff85-6404-4bd7-ba0d-3fb23a5cf52c";
+      fsType = "btrfs";
+      options = [ "subvol=@mcserver" ];
+    };
+
   swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking

hosts/nullbox/mcserver.nix

@@ -0,0 +1,7 @@
+{ pkgs, lib, config, ... }:
+{
+  config = {
+    fileSystems."/srv/mcserver".options = [ "compress=zstd" "nofail" ];
+    networking.firewall.trustedInterfaces = [ "wg0" ];
+  };
+}