forwarder_server/scripts/server_setup.fish

#!/usr/bin/fish

dnf remove -y \
    jq

set -l user admin
set -l user_home /home/$user
set -l user_config $user_home/.config

set -l fish_config $user_config/fish/config.fish
runuser -u $user -- nvim $fish_config
source $fish_config

set -l nvim_config_dir $user_config/nvim
runuser -u $user -- mkdir -p $nvim_config_dir
runuser -u $user -- nvim $nvim_config_dir/init.lua

dnf install -y \
    firewalld
systemctl enable --now firewalld

echo "net.ipv4.ip_forward=1" >>/etc/sysctl.conf
sysctl -p

firewall-cmd --remove-service mdns
firewall-cmd --remove-forward

firewall-cmd --add-masquerade

set -l minisforum_ip 134.93.77.73

# HTTP
firewall-cmd --add-forward-port=port=80:proto=tcp:toport=8000:toaddr=$minisforum_ip
# HTTPS
firewall-cmd --add-forward-port=port=443:proto=tcp:toport=4430:toaddr=$minisforum_ip

# TCP
for port in \
    # Git SSH
    2222 \
    # Rustdesk
    21115-21119
    firewall-cmd --add-forward-port=port=$port:proto=tcp:toport=$port:toaddr=$minisforum_ip
end

# UPD
for port in \
    # Rustdesk
    21116
    firewall-cmd --add-forward-port=port=$port:proto=udp:toport=$port:toaddr=$minisforum_ip
end

firewall-cmd --list-all
read -P "Continue " >/dev/null

firewall-cmd --runtime-to-permanent