forwarder_server/scripts/server_setup.fish

#!/usr/bin/fish

dnf remove -y \
    jq

set -l user admin
set -l user_home /home/$user
set -l user_config $user_home/.config

set -l fish_config $user_config/fish/config.fish
runuser -u $user -- nvim $fish_config
source $fish_config

set -l nvim_config_dir $user_config/nvim
runuser -u $user -- mkdir -p $nvim_config_dir
runuser -u $user -- nvim $nvim_config_dir/init.lua

dnf install -y \
    firewalld
systemctl enable --now firewalld

echo "net.ipv4.ip_forward=1" >>/etc/sysctl.conf
sysctl -p

firewall-cmd --remove-service mdns
firewall-cmd --remove-forward

firewall-cmd --add-masquerade

firewall-cmd --add-forward-port=port=80:proto=tcp:toport=8000:toaddr=134.93.62.232 # HTTP
firewall-cmd --add-forward-port=port=443:proto=tcp:toport=4430:toaddr=134.93.62.232 # HTTPS

# TCP
for port in \
    # Git SSH
    2222 \
    # Rustdesk
    (seq 21115 21119)
    firewall-cmd --add-forward-port=port=$port:proto=tcp:toport=$port:toaddr=134.93.62.232
end

# UPD
for port in \
    # Rustdesk
    21116
    firewall-cmd --add-forward-port=port=$port:proto=udp:toport=$port:toaddr=134.93.62.232
end

firewall-cmd --list-all
read -P "Continue " >/dev/null

firewall-cmd --runtime-to-permanent