e389fe9bce
Signed-off-by: Stefan Mogeritsch <stefan.mo.co@gmail.com>
43 lines
1.2 KiB
Bash
Executable File
43 lines
1.2 KiB
Bash
Executable File
#!/bin/bash
|
|
echo "==========================================="
|
|
echo "Meldestelle - Netzwerk-Optimierung (Firewall)"
|
|
echo "==========================================="
|
|
|
|
if [ "$EUID" -ne 0 ]; then
|
|
echo "Bitte mit sudo ausführen: sudo ./setup-firewall-linux.sh"
|
|
exit 1
|
|
fi
|
|
|
|
# Ports:
|
|
# 8080 (P2P Sync), 8090 (Chat WS), 5353 (mDNS)
|
|
# 8500 (Consul UI - optional), 8600 (Consul DNS - optional)
|
|
|
|
open_ports_firewalld() {
|
|
echo "[Fedora/firewalld] Konfiguriere..."
|
|
firewall-cmd --permanent --add-port=8080/tcp
|
|
firewall-cmd --permanent --add-port=8090/tcp
|
|
firewall-cmd --permanent --add-service=mdns
|
|
# Optional: Consul Ports falls nötig
|
|
# firewall-cmd --permanent --add-port=8500/tcp
|
|
firewall-cmd --reload
|
|
echo "Fertig!"
|
|
}
|
|
|
|
open_ports_ufw() {
|
|
echo "[Ubuntu/ufw] Konfiguriere..."
|
|
ufw allow 8080/tcp comment 'Meldestelle Sync'
|
|
ufw allow 8090/tcp comment 'Meldestelle Chat'
|
|
ufw allow 5353/udp comment 'mDNS Discovery'
|
|
ufw reload
|
|
echo "Fertig!"
|
|
}
|
|
|
|
if command -v firewall-cmd &> /dev/null; then
|
|
open_ports_firewalld
|
|
elif command -v ufw &> /dev/null; then
|
|
open_ports_ufw
|
|
else
|
|
echo "Keine unterstützte Firewall (ufw/firewalld) gefunden."
|
|
echo "Bitte öffnen Sie manuell: 8080/tcp, 8090/tcp und 5353/udp."
|
|
fi
|