akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-16 09:54:43 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(ansible): serveur dédié Satisfactory sur gpu-01

Browse source 
- Nouveau rôle satisfactory_server : install steamcmd (login anonyme,
  app 1690800), service systemd avec update auto en ExecStartPre,
  MemoryMax=16G + Nice=5 (protège le llama-server), firewalld 7777 tcp+udp
- Retries steamcmd (« Missing configuration » rc=8 au premier run)
- Fcontext SELinux bin_t sur steamcmd/ et server/ (203/EXEC sinon)
- gateway : DNAT 192.168.1.200:7777 → gpu-01:7777 (TCP+UDP) + forward
- Doc admin/ops/satisfactory.md (accès, exploitation, pièges rencontrés)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
alkatrazz 2026-07-02 23:29:47 +02:00
parent aaa982f93c
commit bd169e5e1a
9 changed files with 262 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
ansible/roles/gateway/templates/nftables.conf.j2
View file

@ -67,6 +67,11 @@ table inet filter {
# Réponses WAN → cluster (connexions initiées depuis le cluster)
iif {{ wan_interface }} oif {{ lan_interface }} ct state established,related accept
# Satisfactory — trafic DNATé (192.168.1.200:7777) → gpu-01:7777, quelle que soit
# la source (couvre un éventuel port-forward internet depuis la box)
ip daddr 192.168.10.20 tcp dport 7777 ct state new,established,related accept
ip daddr 192.168.10.20 udp dport 7777 ct state new,established,related accept
}
chain output {
@ -77,6 +82,11 @@ table inet filter {
table ip nat {
chain prerouting {
type nat hook prerouting priority -100;
# Satisfactory — DNAT WAN → serveur dédié sur gpu-01
# (joignable via 192.168.1.200:7777 sans route vers 192.168.10.0/24)
iif {{ wan_interface }} tcp dport 7777 dnat to 192.168.10.20:7777
iif {{ wan_interface }} udp dport 7777 dnat to 192.168.10.20:7777
}
chain postrouting {