How I Host Multiple Minecraft Servers at Home (Safely)

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

services:
  mc:
    container_name: wvh
    image: itzg/minecraft-server:java17-jdk
    tty: true
    stdin_open: true
    ports:
      - "XXXXX:25565"
    environment:
      TZ: "America/Chicago"
      
      # Normal Minecraft server settings
      ONLINE_MODE: "TRUE"
      
      # Server Type
      TYPE: FORGE
      FORGE_INSTALLER: "/data/forge-1.18.2-40.2.21-installer.jar"
      
      # Memory & Performance
      MEMORY: "12G"
      
      # Server Settings
      EULA: "TRUE"
      LEVEL: "world"
      DIFFICULTY: "HARD"
      ALLOW_FLIGHT: "TRUE"
      ICON: "https://www.famousbirthdays.com/faces/iskall-image.jpg"
      # MOTD handled by MiniMOTD plugin instead
      # MOTD: "\u00a7c\u00a7k~\u00a7b\u00a7k~\u00a7d\u00a7k~ \u00a76WOLDS \u00a76A\u00a76u\u00a76t\u00a7eo\u00a7em\u00a7ea\u00a7ct\u00a7ce\u00a7cd \u00a7cServer \u00a7d\u00a7k~\u00a7b\u00a7k~\u00a7c\u00a7k~\n\u00a7r\u00a7c|| \u00a7aJoin \u00a7c|| \u00a7bdiscord.gg/JjyNfSW3RJ \u00a7c|| \u00a7a24/7 \u00a7c||"
      ENABLE_QUERY: "TRUE"
      ENABLE_COMMAND_BLOCK: "TRUE"
      SPAWN_PROTECTION: "3"
      SERVER_PORT: "25565"
      ENABLE_WHITELIST: "false"
      OPS: |
        DeiSan
      MAX_TICK_TIME: "-1"

      # CurseForge Mods
      CF_API_KEY: "XXXXXX"
      CURSEFORGE_FILES: | 
        fastload
        ftb-chunks-forge
        ftb-backups-2
        carbon-config
        distant-horizons
      MODRINTH_PROJECTS: ""
      CF_EXCLUDE_MODS: |
        reauth
        auudio-forge
        embeddium
        client-crafting
      CF_FORCE_SYNCHRONIZE: "true"
      
      # Add autostop configuration
      ENABLE_AUTOSTOP: "TRUE"
      AUTOSTOP_TIMEOUT_EST: "900"    # 15 minutes after last player disconnects
      AUTOSTOP_TIMEOUT_INIT: "600"   # 10 minutes if no one connects on startup
      AUTOSTOP_PERIOD: "30"           # Check every 30 seconds
      DEBUG_AUTOSTOP: "FALSE"          # Enable debug logging initially
      # Add health check parameters
      HEALTH_CHECK_ENABLED: "TRUE"
      HEALTH_CHECK_INTERVAL: "30s"
      HEALTH_CHECK_TIMEOUT: "5s"
      HEALTH_CHECK_RETRIES: "3"
      HEALTH_CHECK_START_PERIOD: "120s"

    restart: "no"

    volumes:
      - ./data:/data

  watchdog:
    container_name: wvhw
    image: python:3.9-slim
    restart: unless-stopped
    network_mode: "host"
    volumes:
      - ./watchdog:/app
      - /var/run/docker.sock:/var/run/docker.sock
      - .:/workspace
    command: >
      bash -c "apt-get update && 
      apt-get install -y docker.io docker-compose &&
      cd /app &&
      pip install -r req.txt &&
      chmod -R 755 . &&
      python -u main.py"
    environment:
      TZ: "America/Chicago"
      PYTHONUNBUFFERED: "1"
      PYTHONPATH: "/app"
    working_dir: /workspace

networks:
  minecraft_network:
    driver: bridge

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178

import os
import requests
import zipfile
import shutil
import subprocess
import sys

# --- Configuration ---
SCRIPT_DIR = os.path.dirname(os.path.abspath(__file__))  # Directory where the script lives
ROOT_DIR = SCRIPT_DIR  # Assumes script is in the server root directory (e.g., wolds/)
UPDATE_DIR_NAME = "update"
DATA_DIR_NAME = "data"
DOWNLOAD_URL = "https://example.invalid/path/to/latest-pack.zip"  # TODO: set your pack URL
ZIP_FILE_NAME = "latest-pack.zip"

# Delete mods folder before syncing for a clean install
DELETE_MODS_FOLDER = True

# Files under data/ that should NOT be overwritten during updates
CONFIG_EXCLUSIONS = [
    "server-icon.png",
    "config/luckperms/luckperms-h2.mv.db",
    "config/minimotd/main.conf",
    # add more as needed (paths relative to data/)
]

UPDATE_DIR = os.path.join(ROOT_DIR, UPDATE_DIR_NAME)
DATA_DIR = os.path.join(ROOT_DIR, DATA_DIR_NAME)
ZIP_FILE_PATH = os.path.join(ROOT_DIR, ZIP_FILE_NAME)
# --- End Configuration ---

def build_rsync_exclusions():
    args = []
    for relpath in CONFIG_EXCLUSIONS:
        args.extend(["--exclude", relpath])
    return args

def confirm_deletion(path, kind="file"):
    if not os.path.exists(path):
        return True
    print(f"\n=== DELETION CONFIRMATION ===\nAbout to delete {kind}: {path}")
    while True:
        resp = input(f"Are you sure you want to delete this {kind}? (y/n): ").lower().strip()
        if resp == "y":
            return True
        if resp == "n":
            print(f"Skipping deletion of {path}")
            return False

def run_command(cmd):
    print("Running:", " ".join(cmd))
    try:
        res = subprocess.run(cmd, check=True, text=True, capture_output=True, encoding="utf-8")
        if res.stdout:
            print(res.stdout.strip())
        if res.stderr:
            print(res.stderr.strip())
        return True
    except FileNotFoundError:
        print(f"ERROR: Command not found: {cmd[0]}. Is rsync installed?", file=sys.stderr)
        return False
    except subprocess.CalledProcessError as e:
        print(f"ERROR: Command failed with exit code {e.returncode}", file=sys.stderr)
        if e.stdout: print(e.stdout.strip(), file=sys.stderr)
        if e.stderr: print(e.stderr.strip(), file=sys.stderr)
        return False

def cleanup_update_dir(recreate=True):
    if not confirm_deletion(UPDATE_DIR, "directory"):
        return False
    if os.path.exists(UPDATE_DIR):
        shutil.rmtree(UPDATE_DIR)
    if recreate:
        os.makedirs(UPDATE_DIR, exist_ok=True)
    return True

def is_dir_empty(path):
    return not (os.path.isdir(path) and os.listdir(path))

def main():
    print("--- Starting Server Update Process ---")
    if not os.path.isdir(DATA_DIR):
        print(f"ERROR: Data directory '{DATA_DIR}' does not exist.", file=sys.stderr)
        sys.exit(1)

    # Reuse existing zip or download a fresh one
    skip_download = False
    if os.path.exists(ZIP_FILE_PATH):
        print(f"Found existing zip: {ZIP_FILE_PATH}")
        resp = input("Use it and skip download? (y/n): ").lower().strip()
        skip_download = (resp == "y")
        if not skip_download and confirm_deletion(ZIP_FILE_PATH, "file"):
            os.remove(ZIP_FILE_PATH)

    skip_download_extract = False
    if os.path.isdir(UPDATE_DIR) and not is_dir_empty(UPDATE_DIR):
        print(f"Existing update files in: {UPDATE_DIR}")
        resp = input("Use existing files (skip download & extract)? (y/n): ").lower().strip()
        if resp == "y":
            skip_download_extract = True
        else:
            if not cleanup_update_dir(recreate=True):
                print("Cannot proceed without clearing update directory.")
                sys.exit(1)
    elif not os.path.exists(UPDATE_DIR):
        os.makedirs(UPDATE_DIR)

    if not skip_download_extract:
        if not skip_download:
            print(f"Ready to download: {DOWNLOAD_URL}\nSaving to: {ZIP_FILE_PATH}")
            resp = input("Proceed with download? (y/n): ").lower().strip()
            if resp != "y":
                print("Cancelled.")
                sys.exit(0)
            try:
                with requests.get(DOWNLOAD_URL, stream=True, timeout=60) as r:
                    r.raise_for_status()
                    with open(ZIP_FILE_PATH, "wb") as f:
                        for chunk in r.iter_content(chunk_size=8192):
                            if chunk:
                                f.write(chunk)
                print("Download complete.")
            except Exception as e:
                print(f"ERROR: download failed: {e}", file=sys.stderr)
                sys.exit(1)

        print(f"Extracting {ZIP_FILE_PATH} to {UPDATE_DIR}…")
        try:
            with zipfile.ZipFile(ZIP_FILE_PATH, "r") as z:
                z.extractall(UPDATE_DIR)
        except Exception as e:
            print(f"ERROR: extract failed: {e}", file=sys.stderr)
            cleanup_update_dir(recreate=False)
            sys.exit(1)

        if os.path.exists(ZIP_FILE_PATH) and confirm_deletion(ZIP_FILE_PATH, "file"):
            try:
                os.remove(ZIP_FILE_PATH)
            except Exception as e:
                print(f"WARNING: could not delete zip: {e}", file=sys.stderr)

    print("\n=== RSYNC PREVIEW ===")
    preview_cmd = ["rsync", "-avu", "--dry-run"]
    preview_cmd.extend(build_rsync_exclusions())
    preview_cmd.extend([f"{UPDATE_DIR}/", f"{DATA_DIR}/"])
    if not run_command(preview_cmd):
        sys.exit(1)

    print("\n=== RSYNC CONFIRMATION ===")
    print("This will update files in data/ and preserve timestamps; it will NOT delete extra files.")
    if DELETE_MODS_FOLDER:
        print("It will also DELETE data/mods/ for a clean mod install.")
    resp = input("Proceed? (y/n): ").lower().strip()
    if resp != "y":
        print("Cancelled.")
        sys.exit(0)

    if DELETE_MODS_FOLDER:
        mods_dir = os.path.join(DATA_DIR, "mods")
        if os.path.isdir(mods_dir) and confirm_deletion(mods_dir, "directory"):
            shutil.rmtree(mods_dir)

    sync_cmd = ["rsync", "-avu"]
    sync_cmd.extend(build_rsync_exclusions())
    sync_cmd.extend([f"{UPDATE_DIR}/", f"{DATA_DIR}/"])
    if not run_command(sync_cmd):
        print("ERROR: rsync failed.", file=sys.stderr)
        sys.exit(1)

    print("\nUpdate synchronization completed successfully!")
    cleanup_update_dir(recreate=False)
    print("--- Server Update Process Completed Successfully ---")

if __name__ == "__main__":
    # Ensure the Minecraft server container is STOPPED before running,
    # and RESTARTED after completion.
    main()

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

#!/usr/bin/env bash
set -euo pipefail

CONF_DIR="/etc/mc-forwarding.d"
MAP_FILE="$CONF_DIR/mappings.conf"      # lines: PUB_PORT [DEST_IP] DEST_PORT
ENV_FILE="$CONF_DIR/env"

mkdir -p "$CONF_DIR"; touch "$MAP_FILE"
[[ -f "$ENV_FILE" ]] || cat > "$ENV_FILE" <<'EOF'
# Defaults (override in this file)
BACKEND_IP=10.0.0.190   # example: home WG peer IP (placeholder)
WAN_IF=""               # auto-detect if empty
WG_IF=""                # auto-detect if empty
EOF

source "$ENV_FILE"

detect_wan_if(){ [[ -n "${WAN_IF:-}" ]] && { echo "$WAN_IF"; return; }; ip route get 8.8.8.8 2>/dev/null | awk '/ dev /{for(i=1;i<=NF;i++) if($i=="dev"){print $(i+1); exit}}'; }
detect_wg_if(){ [[ -n "${WG_IF:-}" ]] && { echo "$WG_IF"; return; }; ip -o link show type wireguard 2>/dev/null | awk -F': ' 'NR==1{print $2}'; }

WAN_IF="$(detect_wan_if)"; WG_IF="$(detect_wg_if)"
: "${WAN_IF:?Set WAN_IF in $ENV_FILE if auto-detect fails}"
: "${WG_IF:?Set WG_IF in $ENV_FILE if auto-detect fails}"

ensure_sysctl(){
  sysctl -w net.ipv4.ip_forward=1 >/dev/null
  sysctl -w net.ipv4.conf.all.rp_filter=2 >/dev/null || true
  sysctl -w "net.ipv4.conf.${WAN_IF}.rp_filter=2" >/dev/null || true
  sysctl -w "net.ipv4.conf.${WG_IF}.rp_filter=2" >/dev/null || true
}

ensure_chains(){
  iptables -t nat -N MC_PREROUTING 2>/dev/null || true
  iptables -t nat -C PREROUTING -i "$WAN_IF" -j MC_PREROUTING 2>/dev/null || iptables -t nat -I PREROUTING 1 -i "$WAN_IF" -j MC_PREROUTING
  iptables -t nat -N MC_POSTROUTING 2>/dev/null || true
  iptables -t nat -C POSTROUTING -o "$WG_IF" -j MC_POSTROUTING 2>/dev/null || iptables -t nat -A POSTROUTING -o "$WG_IF" -j MC_POSTROUTING
  iptables -N MC_FORWARD 2>/dev/null || true
  iptables -C FORWARD -j MC_FORWARD 2>/dev/null || iptables -I FORWARD 1 -j MC_FORWARD
}

flush_chains(){ iptables -t nat -F MC_PREROUTING || true; iptables -t nat -F MC_POSTROUTING || true; iptables -F MC_FORWARD || true; }

apply_rules(){
  ensure_sysctl; ensure_chains; flush_chains
  while read -r line; do
    [[ -z "$line" || "$line" =~ ^# ]] && continue
    read -r PUB maybe_ip DEST <<<"$line" || true
    if [[ -z "${DEST:-}" ]]; then DEST_PORT="$maybe_ip"; DEST_IP="$BACKEND_IP"; else DEST_IP="$maybe_ip"; DEST_PORT="$DEST"; fi
    [[ "$PUB" =~ ^[0-9]+$ && "$DEST_PORT" =~ ^[0-9]+$ ]] || { echo "Invalid: $line" >&2; continue; }
    iptables -t nat -A MC_PREROUTING -i "$WAN_IF" -p tcp --dport "$PUB" -j DNAT --to-destination "${DEST_IP}:${DEST_PORT}"
    iptables -A MC_FORWARD -i "$WAN_IF" -o "$WG_IF" -p tcp -d "$DEST_IP" --dport "$DEST_PORT" -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
    iptables -A MC_FORWARD -i "$WG_IF" -o "$WAN_IF" -m state --state ESTABLISHED,RELATED -j ACCEPT
    iptables -t nat -A MC_POSTROUTING -o "$WG_IF" -p tcp -d "$DEST_IP" --dport "$DEST_PORT" -j MASQUERADE
  done < "$MAP_FILE"
}

case "${1:-}" in
  list) echo "WAN_IF=$WAN_IF WG_IF=$WG_IF BACKEND_IP=$BACKEND_IP"; sed -e '/^\s*$/d' -e '/^\s*#/d' "$MAP_FILE"; ;;
  add) shift; [[ $# -eq 2 || $# -eq 3 ]] || { echo "Usage: add PUB DEST_PORT | add PUB DEST_IP DEST_PORT"; exit 1; }; echo "$*" >> "$MAP_FILE"; apply_rules; ;;
  remove) shift; [[ $# -eq 1 ]] || { echo "remove PUB_PORT"; exit 1; }; grep -vE "^\s*#|^\s*$" "$MAP_FILE" | grep -vE "^\s*${1}\b" > "$MAP_FILE.tmp" || true; mv "$MAP_FILE.tmp" "$MAP_FILE"; apply_rules; ;;
  apply) apply_rules; ;;
  *) echo "Commands: list | add | remove | apply"; exit 1; ;;
esac