From 8c4840a0d3c996be39d5f466c4f3cbfc86601dd9 Mon Sep 17 00:00:00 2001
From: heather <heather@iscg.dev>
Date: Sun, 25 Oct 2026 16:35:56 +0000
Subject: [PATCH] Allow Sol agent subnet 10.42/16 in Minecraft API cgroup
 filter

---
 hosts/heather/minecraft-api.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/heather/minecraft-api.nix b/hosts/heather/minecraft-api.nix
index 2c2dbc3..3f56d6c 100644
--- a/hosts/heather/minecraft-api.nix
+++ b/hosts/heather/minecraft-api.nix
@@ -48,7 +48,7 @@
       SystemCallFilter = [ "@system-service" ];
       RestrictAddressFamilies = [ "AF_INET" "AF_UNIX" ];
       IPAddressDeny = "any";
-      IPAddressAllow = [ "10.0.0.0/24" "10.0.1.0/24" "10.0.2.0/24" "10.99.0.0/22" ];
+      IPAddressAllow = [ "10.0.0.0/24" "10.0.1.0/24" "10.0.2.0/24" "10.99.0.0/22" "10.42.0.0/16" ];
       SocketBindDeny = "any";
       SocketBindAllow = "ipv4:tcp:25580";
       MemoryMax = "128M";