transmission: Add protection to local service using firewall

Tests:

- When app is freshly installed, nft rules are inserted.

- Trying to connect to local daemon from fbx user fails.

- Functional tests pass.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
This commit is contained in:
Sunil Mohan Adapa 2022-11-11 11:19:07 -08:00 committed by James Valleroy
parent 9198a00038
commit 6b7556c6d3
No known key found for this signature in database
GPG Key ID: 77C0C75E7B650808

View File

@ -11,7 +11,8 @@ from plinth import cfg, frontpage, menu
from plinth.daemon import Daemon
from plinth.modules.apache.components import Webserver
from plinth.modules.backups.components import BackupRestore
from plinth.modules.firewall.components import Firewall
from plinth.modules.firewall.components import (Firewall,
FirewallLocalProtection)
from plinth.modules.users import add_user_to_share_group
from plinth.modules.users.components import UsersAndGroups
from plinth.package import Packages
@ -50,7 +51,7 @@ class TransmissionApp(app_module.App):
app_id = 'transmission'
_version = 4
_version = 5
DAEMON = 'transmission-daemon'
@ -91,6 +92,10 @@ class TransmissionApp(app_module.App):
'transmission-client'], is_external=True)
self.add(firewall)
firewall_local_protection = FirewallLocalProtection(
'firewall-local-protection-transmission', ['9091'])
self.add(firewall_local_protection)
webserver = Webserver('webserver-transmission', 'transmission-plinth',
urls=['https://{host}/transmission'])
self.add(webserver)