diff options
Diffstat (limited to 'packaging/build')
| -rwxr-xr-x | packaging/build/build-node.sh | 11 |
1 files changed, 4 insertions, 7 deletions
diff --git a/packaging/build/build-node.sh b/packaging/build/build-node.sh index d8a5af4..9ad4968 100755 --- a/packaging/build/build-node.sh +++ b/packaging/build/build-node.sh @@ -75,13 +75,10 @@ cp "$REPO/packaging/systemd/meshbay-node.service" \ cp "$REPO/packaging/systemd/meshbay-node-user.service" \ "$ROOT/usr/lib/systemd/user/meshbay-node.service" -# --- Firewall profiles ---------------------------------------------------- -# firewalld (Fedora) -mkdir -p "$ROOT/usr/lib/firewalld/services" -cp "$REPO/packaging/firewall/firewalld/meshbay-node.xml" \ - "$ROOT/usr/lib/firewalld/services/" - -# UFW (Ubuntu/Debian) +# --- Firewall profile --------------------------------------------------------- +# UFW (Ubuntu/Debian) — carries the "MeshBay Cast" LAN-casting profile only. +# The node's own admin surface is a loopback API (127.0.0.1, token-gated) and +# is never firewall-exposed, so it ships no profile. mkdir -p "$ROOT/etc/ufw/applications.d" cp "$REPO/packaging/firewall/ufw/meshbay" \ "$ROOT/etc/ufw/applications.d/" |