summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDenis Chevalier <perso@denischevalier.fr>2026-08-06 12:52:08 +0200
committerDenis Chevalier <perso@denischevalier.fr>2026-08-06 12:52:08 +0200
commit144ea2008372126e494aa384c9f2a23248c75d45 (patch)
treebcd87379daa089b63252699c9bbd2f8d5862ab48
parent2474523199cde6d1ad8ef6ca085bd690bc5d619a (diff)
downloadpostinstall-144ea2008372126e494aa384c9f2a23248c75d45.tar.gz
postinstall-144ea2008372126e494aa384c9f2a23248c75d45.tar.bz2
postinstall-144ea2008372126e494aa384c9f2a23248c75d45.zip
update ufw config
-rwxr-xr-xetc.bash5
1 files changed, 4 insertions, 1 deletions
diff --git a/etc.bash b/etc.bash
index 87b67b8..fcd99a0 100755
--- a/etc.bash
+++ b/etc.bash
@@ -18,7 +18,10 @@ grep tmpfs /etc/fstab || sudo cat ./etc/fstab >> /etc/fstab
# firewall
sudo ufw default deny incoming
sudo ufw default allow outgoing
-sudo ufw allow ssh
+sudo ufw default deny routed
+sudo ufw limit ssh
+sudo ufw allow from 192.168.1.0/24 to any port 8080 proto tcp
+sudo ufw logging low
sudo ufw enable
sudo systemctl enable --now ufw