Реализован production-hardening по fix1: env/reconfigure, IPv4-only, TLS, secrets, firewall, docs

2026-04-26 07:27:06 +05:00
parent 2b4a45ad23
commit 3fccd5c442
109 changed files with 1773 additions and 569 deletions
@@ -1,4 +1,4 @@
-table inet hy2xs {
+table ip hy2xs {
  chain input {
    type filter hook input priority 0; policy drop;

@@ -6,9 +6,7 @@ table inet hy2xs {
    ct state established,related accept
    tcp dport {{SSH_PORT}} accept
    udp dport {{HYSTERIA_PORT}} accept
-    tcp dport {{UI_PORT}} ip saddr 127.0.0.1 accept
+    tcp dport {{UI_PORT}} ip saddr {{UI_BIND_HOST}} accept
    icmp type echo-request accept
-    ip6 nexthdr ipv6-icmp accept
-    ip protocol icmp accept
  }
 }