d7c0d12314
firewall_initial_setup + firewall_clear_rules (ufw/ufw-docker), host_access.sh (sshd/-T/-t, /etc/ssh, authorized_keys, systemctl reload), set_socket_permissions (docker socket test/chmod), and webui_install_systemd (systemd unit tee + systemctl) -> runSystem. These stay real-root in both modes and define part of the eventual scoped allowlist. Left the 'sudo -u <manager> crontab' run-as-manager lines for a dedicated pass. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> Signed-off-by: librelad <librelad@digitalangels.vip>
61 lines
2.6 KiB
Bash
Executable File
61 lines
2.6 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Clear all LibrePortal-managed firewall rules
|
|
firewallClearLibrePortalRules()
|
|
{
|
|
local total_cleared=0
|
|
|
|
if [[ $EUID -eq 0 ]] && command -v ufw-docker &> /dev/null; then
|
|
local libreportal_rules=$(runSystem ufw-docker list 2>/dev/null | grep -E "(allow|deny)" || echo "")
|
|
if [[ -n "$libreportal_rules" ]]; then
|
|
echo "$libreportal_rules" | while read -r rule_line; do
|
|
if [[ $rule_line =~ (allow|deny)\ ([^[:space:]]+)\ ([^[:space:]]+) ]]; then
|
|
local action="${BASH_REMATCH[1]}"
|
|
local container="${BASH_REMATCH[2]}"
|
|
local port_spec="${BASH_REMATCH[3]}"
|
|
|
|
# Only clear LibrePortal app rules (not system rules)
|
|
if [[ -d "$containers_dir/$container" ]]; then
|
|
local result=$(runSystem ufw-docker delete "$action" "$container" "$port_spec" 2>&1)
|
|
if [[ $? -eq 0 ]]; then
|
|
((total_cleared++))
|
|
isSuccessful "Cleared: $action $container $port_spec"
|
|
else
|
|
isNotice "Failed to clear: $action $container $port_spec"
|
|
fi
|
|
fi
|
|
fi
|
|
done
|
|
else
|
|
isSuccessful "No UFW-Docker rules found"
|
|
fi
|
|
|
|
elif command -v ufw &> /dev/null; then
|
|
local libreportal_rules=$(runSystem ufw status numbered 2>/dev/null | grep -E "ALLOW.*LibrePortal" || echo "")
|
|
|
|
if [[ -n "$libreportal_rules" ]]; then
|
|
echo "$libreportal_rules" | while read -r rule_line; do
|
|
if [[ $rule_line =~ ^\[([0-9]+)\]\ (ALLOW|DENY)\ (.*)\ \(LibrePortal\)$ ]]; then
|
|
local rule_num="${BASH_REMATCH[1]}"
|
|
local action="${BASH_REMATCH[2]}"
|
|
local port_spec="${BASH_REMATCH[3]}"
|
|
|
|
local result=$(runSystem ufw --force delete "$rule_num" 2>&1)
|
|
if [[ $? -eq 0 ]]; then
|
|
((total_cleared++))
|
|
isNotice "Cleared rule #$rule_num: $action $port_spec"
|
|
else
|
|
isNotice "Failed to clear rule #$rule_num: $action $port_spec"
|
|
fi
|
|
fi
|
|
done
|
|
else
|
|
isSuccessful "No LibrePortal UFW rules found"
|
|
fi
|
|
else
|
|
isNotice "No firewall management available"
|
|
fi
|
|
|
|
isSuccessful "Cleared $total_cleared LibrePortal firewall rules"
|
|
}
|