public/omnixy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Prepare for firewall to be setup on first run

Browse Source
This commit is contained in:
David Heinemeier Hansson
2025-08-25 07:28:59 +02:00
parent 28ba0bff7a
commit 661eed2640
5 changed files with 1 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
bin/omarchy-install-firewall
View File

@@ -1,30 +0,0 @@
#!/bin/bash
if ! command -v ufw &>/dev/null; then
sudo pacman -S --noconfirm ufw
fi
if ! command -v ufw-docker &>/dev/null; then
sudo pacman -S --noconfirm ufw-docker
fi
# Allow nothing in, everything out
sudo ufw default deny incoming
sudo ufw default allow outgoing
# Allow ports for LocalSend
sudo ufw allow 53317/udp
sudo ufw allow 53317/tcp
# Allow SSH in
sudo ufw allow 22/tcp
# Allow Docker containers to use DNS on host
sudo ufw allow in proto udp from 172.16.0.0/12 to 172.17.0.1 port 53 comment 'allow-docker-dns'
# Turn on the firewall
sudo ufw --force enable
# Turn on Docker protections
sudo ufw-docker install
sudo ufw reload

3
bin/omarchy-menu
View File

@@ -192,8 +192,7 @@ show_install_menu() {
}
show_install_service_menu() {
case $(menu "Install" "󱨑 Firewall\n Dropbox\n Tailscale") in
*Firewall*) present_terminal omarchy-install-firewall ;;
case $(menu "Install" " Dropbox\n Tailscale") in
*Dropbox*) present_terminal omarchy-install-dropbox ;;
*Tailscale*) present_terminal omarchy-install-tailscale ;;
*) show_install_menu ;;