Adding some system-wide things

This commit is contained in:
swagg boi 2025-03-15 17:35:45 +00:00
parent 63bb5cb154
commit 8cdab9a308
2 changed files with 22 additions and 0 deletions

21
my_etc/npf.conf Normal file
View File

@ -0,0 +1,21 @@
# TODO: Allow in ICMP(v6) by message type
# TODO: Rate-limit ssh
# ICMP(v6)
alg "icmp"
group "services" in on vioif0 {
pass stateful proto tcp to any port ssh
}
group "localhost" in on lo0 {
pass stateful all
}
group default {
# Default rule
block all
# Let it goooooo
pass stateful out all
}

1
my_usr/pkg/etc/doas.conf Normal file
View File

@ -0,0 +1 @@
permit persist keepenv setenv { PATH } :wheel