From b44f5f261b006cd8a1b0bd0d19a2ce87555e3c60 Mon Sep 17 00:00:00 2001
From: Marcus Kammer <marcus.kammer@mailbox.org>
Date: Sun, 3 Dec 2023 11:56:45 +0100
Subject: [PATCH] Set ufw rules for pihole

---
 sbcl-nginx.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/sbcl-nginx.yml b/sbcl-nginx.yml
index 37f099c..dcacf94 100644
--- a/sbcl-nginx.yml
+++ b/sbcl-nginx.yml
@@ -439,6 +439,18 @@ write_files:
       -- Import the data into the 'access_logs' table
       .import '/var/log/nginx/access.csv' access_logs
 
+  - path: /home/cl/pihole_set_ufw.sh
+    owner: 'cl:cl'
+    permissions: '0755'
+    defer: True
+    content: |
+      sudo ufw allow 80/tcp
+      sudo ufw allow 53/tcp
+      sudo ufw allow 53/udp
+      sudo ufw allow 67/tcp
+      sudo ufw allow 67/udp
+      sudo ufw allow 546:547/udp
+
   - path: /home/cl/01_setup_sbcl.sh
     owner: 'cl:cl'
     permissions: '0755'