From 587c6f19d3fece6f0f976404ddef415a14d7fc5f Mon Sep 17 00:00:00 2001 From: TrudeEH Date: Thu, 13 Mar 2025 15:22:19 +0000 Subject: [PATCH] Add UFW firewall setup to install script --- install.sh | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/install.sh b/install.sh index 082b6976..0a271112 100755 --- a/install.sh +++ b/install.sh @@ -37,7 +37,7 @@ echo -e "${CYAN}Package managers: ${PURPLE}${packageManagers[@]}${NC}" echo # Install Programs -programs=(neovim curl git tmux htop fzf gcc make tldr s-tui) +programs=(neovim curl git tmux htop fzf gcc make tldr s-tui pass ufw) p i ${programs[@]} # Copy files @@ -89,3 +89,19 @@ if [[ "$OSTYPE" != "darwin"* ]]; then echo -e "${GREEN}[I] Dconf settings loaded successfully.${NC}" fi fi + +# UFW Firewall +echo -e "${YELLOW}[+] Setting up UFW...${NC}" +sudo ufw default deny incoming +sudo ufw default allow outgoing +if systemctl is-active --quiet sshd; then + echo -e "${YELLOW}[+] SSH Server detected; Enabling SSH rule...${NC}" + sudo ufw limit 22/tcp +fi +sudo ufw enable +sudo ufw status numbered +if [ $? -ne 0 ]; then + echo -e "${RED}[E] Error setting up UFW.${NC}" +else + echo -e "${GREEN}[I] UFW setup successfully.${NC}" +fi