ramm 0.0.33 → 0.0.34

package/dist/ramm.js

@@ -225,7 +225,10 @@ var addNftPodmanRule = async () => {
   await execCommand("nft insert rule inet ramm prerouting iifname @podman_interfaces accept");
 };
 // src/nft.ts
-var createNftTable = ({ allowedIpV4 }) => {
+var createNftTable = ({
+  allowedIpV4,
+  allowedPorts
+}) => {
   const nftTable = `table inet ramm {
     set allowed_ipv4 {
       type ipv4_addr
@@ -240,8 +243,10 @@ var createNftTable = ({ allowedIpV4 }) => {
       ip saddr @allowed_ipv4 tcp dport 22 accept
       tcp dport 22 ct state new limit rate over 700/minute burst 5 packets drop
       tcp dport 22 accept
-      tcp dport 80 accept
-      tcp dport 443 accept
+      ${allowedPorts.map((port) => {
+    return `tcp dport ${port} accept`;
+  }).join(`
+`)}
     }
 
     chain local_chain {
@@ -258,10 +263,11 @@ var createNftTable = ({ allowedIpV4 }) => {
   return nftTable;
 };
 var setupNftable = async ({
-  allowedIpV4
+  allowedIpV4,
+  allowedPorts
 }) => {
   await execCommand("nft flush ruleset");
-  const nftTable = createNftTable({ allowedIpV4 });
+  const nftTable = createNftTable({ allowedIpV4, allowedPorts });
   await execCommand(`nft -f - <<EOF
 ${nftTable}
 EOF`);

package/dist/types/nft.d.ts

@@ -1,4 +1,5 @@
 export declare const localNftChainName = "local_chain";
-export declare const setupNftable: ({ allowedIpV4, }: {
+export declare const setupNftable: ({ allowedIpV4, allowedPorts, }: {
     allowedIpV4: string[];
+    allowedPorts: string[];
 }) => Promise<void>;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ramm",
   "type": "module",
-  "version": "0.0.33",
+  "version": "0.0.34",
   "scripts": {
     "build": "bun build ./src/ramm.ts --target bun --outdir ./dist && cp ./src/bun.sh ./dist/bun.sh",
     "types": "tsc --project tsconfig.types.json"