23 lines
460 B
Bash
23 lines
460 B
Bash
#!/bin/bash
|
|
|
|
if ! command -v ufw &>/dev/null; then
|
|
yay -S --noconfirm --needed ufw ufw-docker
|
|
|
|
# Allow nothing in, everything out
|
|
sudo ufw default deny incoming
|
|
sudo ufw default allow outgoing
|
|
|
|
# Allow SSH in
|
|
sudo ufw allow 22/tcp
|
|
|
|
# Allow Docker containers to use DNS on host
|
|
sudo ufw allow in on docker0 to any port 53
|
|
|
|
# Turn on the firewall
|
|
sudo ufw enable
|
|
|
|
# Turn on Docker protections
|
|
sudo ufw-docker install
|
|
sudo ufw reload
|
|
fi
|