Подготовить HY2XS к production-сборке

2026-04-25 23:13:12 +05:00
commit 84a4e94567
277 changed files with 26513 additions and 0 deletions
@@ -0,0 +1,22 @@
+import type { InstallContext } from "../types/context";
+import { readText, renderTemplate, writeText } from "../lib/fs";
+import { info } from "../lib/log";
+import { runVisible } from "../lib/process";
+
+export async function applyFirewall(context: InstallContext): Promise<void> {
+  if (context.options.skipFirewall) {
+    info("firewall skipped by flag");
+    return;
+  }
+
+  const rendered = renderTemplate(await readText(`${context.options.packageDir}/templates/nftables/hy2xs.nft.tpl`), {
+    SSH_PORT: context.options.sshPort,
+    HYSTERIA_PORT: context.options.port,
+    UI_PORT: context.options.uiPort
+  });
+
+  await runVisible`cp -a /etc/nftables.conf /etc/nftables.conf.hy2xs.bak 2>/dev/null || true`;
+  await writeText("/etc/nftables.conf", rendered, 0o644);
+  await runVisible`nft -f /etc/nftables.conf`;
+  await runVisible`systemctl enable --now nftables`;
+}