diff options
Diffstat (limited to 'bootstrap.d/21-firewall.sh')
| -rw-r--r-- | bootstrap.d/21-firewall.sh | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/bootstrap.d/21-firewall.sh b/bootstrap.d/21-firewall.sh index 247325e..7583d04 100644 --- a/bootstrap.d/21-firewall.sh +++ b/bootstrap.d/21-firewall.sh @@ -7,16 +7,16 @@ if [ "$ENABLE_IPTABLES" = true ] ; then # Create iptables configuration directory - mkdir -p "$R/etc/iptables" + mkdir -p "${ETCDIR}/iptables" # Install iptables systemd service - install_readonly files/iptables/iptables.service "$R/etc/systemd/system/iptables.service" + install_readonly files/iptables/iptables.service "${ETCDIR}/systemd/system/iptables.service" # Install flush-table script called by iptables service - install_exec files/iptables/flush-iptables.sh "$R/etc/iptables/flush-iptables.sh" + install_exec files/iptables/flush-iptables.sh "${ETCDIR}/iptables/flush-iptables.sh" # Install iptables rule file - install_readonly files/iptables/iptables.rules "$R/etc/iptables/iptables.rules" + install_readonly files/iptables/iptables.rules "${ETCDIR}/iptables/iptables.rules" # Reload systemd configuration and enable iptables service chroot_exec systemctl daemon-reload @@ -24,12 +24,12 @@ if [ "$ENABLE_IPTABLES" = true ] ; then if [ "$ENABLE_IPV6" = true ] ; then # Install ip6tables systemd service - install_readonly files/iptables/ip6tables.service "$R/etc/systemd/system/ip6tables.service" + install_readonly files/iptables/ip6tables.service "${ETCDIR}/systemd/system/ip6tables.service" # Install ip6tables file - install_exec files/iptables/flush-ip6tables.sh "$R/etc/iptables/flush-ip6tables.sh" + install_exec files/iptables/flush-ip6tables.sh "${ETCDIR}/iptables/flush-ip6tables.sh" - install_readonly files/iptables/ip6tables.rules "$R/etc/iptables/ip6tables.rules" + install_readonly files/iptables/ip6tables.rules "${ETCDIR}/iptables/ip6tables.rules" # Reload systemd configuration and enable iptables service chroot_exec systemctl daemon-reload @@ -39,6 +39,6 @@ fi if [ "$ENABLE_SSHD" = false ] ; then # Remove SSHD related iptables rules - sed -i "/^#/! {/SSH/ s/^/# /}" "$R/etc/iptables/iptables.rules" 2> /dev/null - sed -i "/^#/! {/SSH/ s/^/# /}" "$R/etc/iptables/ip6tables.rules" 2> /dev/null + sed -i "/^#/! {/SSH/ s/^/# /}" "${ETCDIR}/iptables/iptables.rules" 2> /dev/null + sed -i "/^#/! {/SSH/ s/^/# /}" "${ETCDIR}/iptables/ip6tables.rules" 2> /dev/null fi |