forge/pmaports
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

main/postmarketos-config-nftables: add mosh config (MR 2725)

Browse source 
https://social.linux.pizza/@jan_wagemakers/107393948283025525

[ci:skip-build] already built successfully in CI
This commit is contained in:
Anjandev Momi 2021-12-05 15:25:43 -05:00 committed by Clayton Craft
parent 69634b878e
commit 6b308af051
No known key found for this signature in database
GPG key ID: 4A4CED6D7EDF950A
2 changed files with 23 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
main/postmarketos-config-nftables/APKBUILD
View file

@ -1,7 +1,7 @@
# Maintainer: Clayton Craft <clayton@craftyguy.net> # Maintainer: Clayton Craft <clayton@craftyguy.net>
pkgname=postmarketos-config-nftables pkgname=postmarketos-config-nftables
pkgver=0.9 pkgver=0.10
pkgrel=1 pkgrel=0
pkgdesc="nftables firewall configuration for postmarketOS" pkgdesc="nftables firewall configuration for postmarketOS"
url="https://gitlab.com/postmarketos" url="https://gitlab.com/postmarketos"
arch="noarch" arch="noarch"
@ -11,6 +11,7 @@ subpackages="
$pkgname-openusb:openusb $pkgname-openusb:openusb
$pkgname-log:log $pkgname-log:log
$pkgname-docker:docker $pkgname-docker:docker
$pkgname-moshserver:moshserver
$pkgname-networkmanager:networkmanager $pkgname-networkmanager:networkmanager
$pkgname-vncserver:vncserver $pkgname-vncserver:vncserver
" "
@ -20,6 +21,7 @@ source="
rules/10_dhcp.nft rules/10_dhcp.nft
rules/50_ssh.nft rules/50_ssh.nft
rules/51_docker.nft rules/51_docker.nft
rules/51_moshserver.nft
rules/51_hotspot.nft rules/51_hotspot.nft
rules/51_usb_inet.nft rules/51_usb_inet.nft
rules/50_vncserver.nft rules/50_vncserver.nft
@ -60,6 +62,14 @@ docker() {
amove etc/nftables.d/51_docker.nft amove etc/nftables.d/51_docker.nft
} }
moshserver() {
depends="$pkgname"
description="Enables networking for mosh server"
install_if="$pkgname=$pkgver-r$pkgrel mosh-server"
amove etc/nftables.d/51_moshserver.nft
}
vncserver() { vncserver() {
depends="$pkgname" depends="$pkgname"
description="Enables networking for VNC Server" description="Enables networking for VNC Server"
@ -82,6 +92,7 @@ sha512sums="
d5a7c7fc47924acfafee42d731e6a0109d83af6278053128deecbf3cf40e37447cb649360ee9ebddd2a5ea276888314b63ce7ef828708b5bf7dd1bface7fbc62 10_dhcp.nft d5a7c7fc47924acfafee42d731e6a0109d83af6278053128deecbf3cf40e37447cb649360ee9ebddd2a5ea276888314b63ce7ef828708b5bf7dd1bface7fbc62 10_dhcp.nft
6b0d0c7c3368dde1ad61d26a0c2e13008f16d5bedaf11fa4a3511b49675505cbbdda8bf8ff158194846b197108f76bdfd66d40a2afb9f4d25c79b02acf5659b7 50_ssh.nft 6b0d0c7c3368dde1ad61d26a0c2e13008f16d5bedaf11fa4a3511b49675505cbbdda8bf8ff158194846b197108f76bdfd66d40a2afb9f4d25c79b02acf5659b7 50_ssh.nft
76ac156ee80f895ab4f574f70f4ee9f960dfd23a3381bbbf7c744bea919b98f69e91e2eaa10425dfeaf5dbe77b745ec1dd82cb94953835873baffd9e5d89e166 51_docker.nft 76ac156ee80f895ab4f574f70f4ee9f960dfd23a3381bbbf7c744bea919b98f69e91e2eaa10425dfeaf5dbe77b745ec1dd82cb94953835873baffd9e5d89e166 51_docker.nft
59d93d0006aadb6f699836895119cf49a2fbbc1159cad4ab98868610cd6796da7fe792e7c845df93303a4cfa77658e0687b6726a8b0bcf613563f1a33d5588ab 51_moshserver.nft
1ce70bb71c9008b6c727a2c26d11467be3b5a0cb9815a8bb0790150c7958457b22b110e35ba974973b9579d44bd14219985d85597c954b5fa8cf77bf206c959b 51_hotspot.nft 1ce70bb71c9008b6c727a2c26d11467be3b5a0cb9815a8bb0790150c7958457b22b110e35ba974973b9579d44bd14219985d85597c954b5fa8cf77bf206c959b 51_hotspot.nft
bceb1a12a9de044daa3a4ba647b0d69b257881151a912fc350d6a00fdf0c0903b51fb58c56cfc73e9a75f529bac841d41d466e0f210b1f516e124e69cbfd1feb 51_usb_inet.nft bceb1a12a9de044daa3a4ba647b0d69b257881151a912fc350d6a00fdf0c0903b51fb58c56cfc73e9a75f529bac841d41d466e0f210b1f516e124e69cbfd1feb 51_usb_inet.nft
dfe0c8f7e86f187a9a69a35f1f4e9125dca385ad372777aab3d820886b26061214f3dc3f0d012690e981e0dec9bcacf154c69eab56dfa549d132555663b1f8e9 50_vncserver.nft dfe0c8f7e86f187a9a69a35f1f4e9125dca385ad372777aab3d820886b26061214f3dc3f0d012690e981e0dec9bcacf154c69eab56dfa549d132555663b1f8e9 50_vncserver.nft

10
main/postmarketos-config-nftables/rules/51_moshserver.nft Normal file
View file

@ -0,0 +1,10 @@
#!/usr/sbin/nft -f
table inet filter {
chain input {
# allow mosh
udp dport 60000-60010 accept comment "accept mosh"
}
}