diff --git a/.config/yadm/bootstrap b/.config/yadm/bootstrap index 4beb030..e58c04c 100755 --- a/.config/yadm/bootstrap +++ b/.config/yadm/bootstrap @@ -72,18 +72,7 @@ mkdir -p ~/.mixxx ln -s -t ~/.mixxx ${XDG_DATA_HOME:-$HOME/.local/share}/mixxx/* ${XDG_CONFIG_HOME:-$HOME/.config}/mixxx/* highlight "Block internet at night & on weekdays in the morning to force focus" -# https://askubuntu.com/a/124512 and https://blog.sleeplessbeastie.eu/2018/06/21/how-to-create-iptables-firewall-using-custom-chains/ -sudo iptables --new-chain chain-times 2>/dev/null || sudo iptables --flush chain-times -time9=$(date -u -d "$(date -d 09:00)" +%k) -# Always allow local connections - https://serverfault.com/a/550278 -sudo iptables -A chain-times -m owner --uid-owner janek -d 192.168.1.0/24 -j ACCEPT -sudo iptables -A chain-times -m owner --uid-owner janek -d 127.0.0.0/8 -j ACCEPT -sudo iptables -A chain-times -m owner --uid-owner janek -j DROP -m time --timestart $(date -u -d "$(date -d 22)" +%k):00 --timestop $time9:00 -sudo iptables -A chain-times -m owner --uid-owner janek -j DROP -m time --weekdays 1-5 --timestart $time9:20 --timestop $(expr $time9 + 1):00 -sudo iptables -A chain-times -m owner --uid-owner janek -j DROP -m time --weekdays 1-5 --timestart $(expr $time9 + 1):20 --timestop $(expr $time9 + 2):00 -sudo iptables -L OUTPUT | grep -q "^chain-times" || sudo iptables -A OUTPUT -j chain-times -sudo iptables-save | sudo tee /etc/iptables.rules -echo "@reboot root $(which iptables-restore) < /etc/iptables.rules" | sudo tee /etc/cron.d/iptables-times +walli 22 highlight "Cron logging" echo 'cron.* /var/log/cron.log' | sudo tee /etc/rsyslog.d/60-cron.conf diff --git a/.config/zsh/.zshrc b/.config/zsh/.zshrc index 9f69483..499dad0 100644 --- a/.config/zsh/.zshrc +++ b/.config/zsh/.zshrc @@ -1,3 +1,4 @@ +GITSTATUS_LOG_LEVEL=DEBUG # Commands if test "$PWD" = "$HOME" && test "$0" != "$SHELL"; then neofetch --config $XDG_CONFIG_HOME/neofetch/config-short.conf diff --git a/.local/bin/scripts/walli b/.local/bin/scripts/walli new file mode 100755 index 0000000..992b87e --- /dev/null +++ b/.local/bin/scripts/walli @@ -0,0 +1,13 @@ +#!/bin/sh +# https://askubuntu.com/a/124512 and https://blog.sleeplessbeastie.eu/2018/06/21/how-to-create-iptables-firewall-using-custom-chains/ +sudo iptables --new-chain chain-times 2>/dev/null || sudo iptables --flush chain-times +time9=$(date -u -d "$(date -d 09:00)" +%k) +# Always allow local connections - https://serverfault.com/a/550278 +sudo iptables -A chain-times -m owner --uid-owner janek -d 192.168.1.0/24 -j ACCEPT +sudo iptables -A chain-times -m owner --uid-owner janek -d 127.0.0.0/8 -j ACCEPT +sudo iptables -A chain-times -m owner --uid-owner janek -j DROP -m time --timestart $(date -u -d "$(date -d ${1:-22})" +%k):00 --timestop $time9:00 +sudo iptables -A chain-times -m owner --uid-owner janek -j DROP -m time --weekdays 1-5 --timestart $time9:20 --timestop $(expr $time9 + 1):00 +sudo iptables -A chain-times -m owner --uid-owner janek -j DROP -m time --weekdays 1-5 --timestart $(expr $time9 + 1):20 --timestop $(expr $time9 + 2):00 +sudo iptables -L OUTPUT | grep -q "^chain-times" || sudo iptables -A OUTPUT -j chain-times +sudo iptables-save | sudo tee /etc/iptables.rules +echo "@reboot root $(which iptables-restore) < /etc/iptables.rules" | sudo tee /etc/cron.d/iptables-times