DeBros/network
4
0
Fork 0
mirror of https://github.com/DeBrosOfficial/network.git synced 2025-10-06 17:49:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

Improve UFW firewall configuration

Browse Source 
- Add UFW rules regardless of current UFW status
- Preserve user's existing UFW policy (don't auto-enable)
- Provide better feedback on rule addition and UFW status
- Enhanced manual configuration instructions when UFW not found
- Rules are ready when UFW is eventually enabled by user
This commit is contained in:
johnysigma 2025-08-04 14:39:35 +03:00
parent abcfca230d
commit f05e50ad19
1 changed files with 38 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

51
scripts/install-debros-network.sh
View File

@ -551,28 +551,53 @@ EOF
# Configure firewall # Configure firewall
configure_firewall() { configure_firewall() {
if [[ "$CONFIGURE_FIREWALL" == "yes" ]]; then if [[ "$CONFIGURE_FIREWALL" == "yes" ]]; then
log "Configuring firewall..." log "Configuring firewall rules..."
if command -v ufw &> /dev/null; then if command -v ufw &> /dev/null; then
# Add firewall rules regardless of UFW status
# This allows the rules to be ready when UFW is enabled
log "Adding UFW rules for DeBros Network ports..."
# Add ports based on node type with error handling
if [ "$NODE_TYPE" = "bootstrap" ]; then if [ "$NODE_TYPE" = "bootstrap" ]; then
sudo ufw allow $BOOTSTRAP_PORT for port in $BOOTSTRAP_PORT $RQLITE_BOOTSTRAP_PORT $RAFT_BOOTSTRAP_PORT; do
sudo ufw allow $RQLITE_BOOTSTRAP_PORT if ! sudo ufw allow $port; then
sudo ufw allow $RAFT_BOOTSTRAP_PORT error "Failed to allow port $port"
exit 1
fi
log "Added UFW rule: allow port $port"
done
else else
sudo ufw allow $NODE_PORT for port in $NODE_PORT $RQLITE_NODE_PORT $RAFT_NODE_PORT; do
sudo ufw allow $RQLITE_NODE_PORT if ! sudo ufw allow $port; then
sudo ufw allow $RAFT_NODE_PORT error "Failed to allow port $port"
exit 1
fi
log "Added UFW rule: allow port $port"
done
fi fi
# Enable ufw if not already active # Check UFW status and inform user
UFW_STATUS=$(sudo ufw status | grep -o "Status: [a-z]*" | awk '{print $2}' || echo "inactive") UFW_STATUS=$(sudo ufw status | grep -o "Status: [a-z]\+" | awk '{print $2}' || echo "inactive")
if [[ "$UFW_STATUS" != "active" ]]; then
echo "y" | sudo ufw enable
fi
success "Firewall configured" if [[ "$UFW_STATUS" == "active" ]]; then
success "Firewall rules added and active"
else
success "Firewall rules added (UFW is inactive - rules will take effect when UFW is enabled)"
log "To enable UFW with current rules: sudo ufw enable"
fi
else else
warning "UFW not found. Please configure firewall manually." warning "UFW not found. Please configure firewall manually."
log "Required ports to allow:"
if [ "$NODE_TYPE" = "bootstrap" ]; then
log " - Port $BOOTSTRAP_PORT (Bootstrap)"
log " - Port $RQLITE_BOOTSTRAP_PORT (RQLite)"
log " - Port $RAFT_BOOTSTRAP_PORT (Raft)"
else
log " - Port $NODE_PORT (Node)"
log " - Port $RQLITE_NODE_PORT (RQLite)"
log " - Port $RAFT_NODE_PORT (Raft)"
fi
fi fi
fi fi
} }