Merge pull request #113714 from ilian/steam-firewall

nixos/steam: Add port forwarding options

Lassulus f38b9b25 aed658c6

Changed files
+31 -1
nixos
modules
programs
+31 -1
nixos/modules/programs/steam.nix
···
else [ package32 ] ++ extraPackages32;
};
in {
-
options.programs.steam.enable = mkEnableOption "steam";
config = mkIf cfg.enable {
hardware.opengl = { # this fixes the "glXChooseVisual failed" bug, context: https://github.com/NixOS/nixpkgs/issues/47932
···
hardware.steam-hardware.enable = true;
environment.systemPackages = [ steam steam.run ];
};
meta.maintainers = with maintainers; [ mkg20001 ];
···
else [ package32 ] ++ extraPackages32;
};
in {
+
options.programs.steam = {
+
enable = mkEnableOption "steam";
+
+
remotePlay.openFirewall = mkOption {
+
type = types.bool;
+
default = false;
+
description = ''
+
Open ports in the firewall for Steam Remote Play.
+
'';
+
};
+
+
dedicatedServer.openFirewall = mkOption {
+
type = types.bool;
+
default = false;
+
description = ''
+
Open ports in the firewall for Source Dedicated Server.
+
'';
+
};
+
};
config = mkIf cfg.enable {
hardware.opengl = { # this fixes the "glXChooseVisual failed" bug, context: https://github.com/NixOS/nixpkgs/issues/47932
···
hardware.steam-hardware.enable = true;
environment.systemPackages = [ steam steam.run ];
+
+
networking.firewall = lib.mkMerge [
+
(mkIf cfg.remotePlay.openFirewall {
+
allowedTCPPorts = [ 27036 ];
+
allowedUDPPortRanges = [ { from = 27031; to = 27036; } ];
+
})
+
+
(mkIf cfg.dedicatedServer.openFirewall {
+
allowedTCPPorts = [ 27015 ]; # SRCDS Rcon port
+
allowedUDPPorts = [ 27015 ]; # Gameplay traffic
+
})
+
];
};
meta.maintainers = with maintainers; [ mkg20001 ];