zias/omarchy
1
0
Fork 0
mirror of https://github.com/basecamp/omarchy.git synced 2026-02-17 15:25:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

Prepare for firewall to be setup on first run

Browse Source
This commit is contained in:
David Heinemeier Hansson
2025-08-25 07:28:59 +02:00
parent 28ba0bff7a
commit 661eed2640
5 changed files with 1 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
install/first-run/firewall.sh Normal file
View File

@@ -0,0 +1,22 @@
#!/bin/bash
# Allow nothing in, everything out
sudo ufw default deny incoming
sudo ufw default allow outgoing
# Allow ports for LocalSend
sudo ufw allow 53317/udp
sudo ufw allow 53317/tcp
# Allow SSH in
sudo ufw allow 22/tcp
# Allow Docker containers to use DNS on host
sudo ufw allow in proto udp from 172.16.0.0/12 to 172.17.0.1 port 53 comment 'allow-docker-dns'
# Turn on the firewall
sudo ufw --force enable
# Turn on Docker protections
sudo ufw-docker install
sudo ufw reload