From 740fca4fcfc14d822e3fc1c9b54cf57447dc348a Mon Sep 17 00:00:00 2001
From: ediblerope <fredrik@nordhammer.it>
Date: Sat, 18 Apr 2026 21:43:11 +0100
Subject: [PATCH] Expose 7DTD WebDashboard behind Authelia at
 7dtd.nordhammer.it

Publishes the container's web dashboard port only on host loopback
(127.0.0.1:8090) so nginx can reverse-proxy it with Authelia
forward-auth, matching the Homepage/camera vhost pattern. Also flips
WebDashboardEnabled to true in the XML patcher so the server actually
starts the web server.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 services/game-servers.nix | 15 +++++++++------
 services/nginx.nix        |  1 +
 2 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/services/game-servers.nix b/services/game-servers.nix
index 660c3a9..59b4885 100644
--- a/services/game-servers.nix
+++ b/services/game-servers.nix
@@ -29,6 +29,8 @@
           "26900:26900/udp"
           "26901:26901/udp"
           "26902:26902/udp"
+          # WebDashboard — localhost-only; nginx reverse-proxies it with Authelia
+          "127.0.0.1:8090:8080/tcp"
         ];
         environment = {
           START_MODE = "1";
@@ -66,12 +68,13 @@
           sed -i "s|<property name=\"$1\"[^/]*value=\"[^\"]*\"|<property name=\"$1\" value=\"$2\"|" "$CONFIG"
         }
 
-        set_prop ServerName     "Nordhammer.it"
-        set_prop ServerPassword "DaveSmells"
-        set_prop GameWorld      "RWG"
-        set_prop WorldGenSeed   "Nordhammer"
-        set_prop WorldGenSize   "8192"
-        set_prop GameName       "Nordhammer"
+        set_prop ServerName          "Nordhammer.it"
+        set_prop ServerPassword      "DaveSmells"
+        set_prop GameWorld           "RWG"
+        set_prop WorldGenSeed        "Nordhammer"
+        set_prop WorldGenSize        "8192"
+        set_prop GameName            "Nordhammer"
+        set_prop WebDashboardEnabled "true"
 
         touch "$MARKER"
         echo "Patched; restarting container to apply."
diff --git a/services/nginx.nix b/services/nginx.nix
index 620c3ca..ad64c30 100644
--- a/services/nginx.nix
+++ b/services/nginx.nix
@@ -107,6 +107,7 @@ in
         # --- Protected by Authelia ---
         "camera.nordhammer.it"   = protectedProxy 1984;
         "homepage.nordhammer.it" = protectedProxy 8082;
+        "7dtd.nordhammer.it"     = protectedProxy 8090;
 
         # --- Local-only: serves update history JSON to Homepage's customapi widget ---
         "homepage-updates.local" = {