From be9d37e2f08386b880329d18d1e16c0be3d78ca1 Mon Sep 17 00:00:00 2001
From: ilian <ilian@tuta.io>
Date: Fri, 19 Feb 2021 20:06:01 +0100
Subject: [PATCH] nixos/steam: Add port forwarding options
---
nixos/modules/programs/steam.nix | 32 +++++++++++++++++++++++++++++++-
1 file changed, 31 insertions(+), 1 deletion(-)
diff --git a/nixos/modules/programs/steam.nix b/nixos/modules/programs/steam.nix
index 6e9b7729ad6..025ef617f10 100644
--- a/nixos/modules/programs/steam.nix
+++ b/nixos/modules/programs/steam.nix
@@ -12,7 +12,25 @@ let
else [ package32 ] ++ extraPackages32;
};
in {
- options.programs.steam.enable = mkEnableOption "steam";
+ options.programs.steam = {
+ enable = mkEnableOption "steam";
+
+ remotePlay.openFirewall = mkOption {
+ type = types.bool;
+ default = false;
+ description = ''
+ Open ports in the firewall for Steam Remote Play.
+ '';
+ };
+
+ dedicatedServer.openFirewall = mkOption {
+ type = types.bool;
+ default = false;
+ description = ''
+ Open ports in the firewall for Source Dedicated Server.
+ '';
+ };
+ };
config = mkIf cfg.enable {
hardware.opengl = { # this fixes the "glXChooseVisual failed" bug, context: https://github.com/NixOS/nixpkgs/issues/47932
@@ -26,6 +44,18 @@ in {
hardware.steam-hardware.enable = true;
environment.systemPackages = [ steam steam.run ];
+
+ networking.firewall = lib.mkMerge [
+ (mkIf cfg.remotePlay.openFirewall {
+ allowedTCPPorts = [ 27036 ];
+ allowedUDPPortRanges = [ { from = 27031; to = 27036; } ];
+ })
+
+ (mkIf cfg.dedicatedServer.openFirewall {
+ allowedTCPPorts = [ 27015 ]; # SRCDS Rcon port
+ allowedUDPPorts = [ 27015 ]; # Gameplay traffic
+ })
+ ];
};
meta.maintainers = with maintainers; [ mkg20001 ];