Denozordec
7b3f002e5f
CI / changes (push) Successful in 10s
CI / commitlint (push) Has been skipped
CI / openapi (push) Has been skipped
CI / web (push) Successful in 57s
CI / go (push) Successful in 1m11s
CI / bird2 (push) Successful in 15s
CI / release (push) Successful in 4m16s
Added a community selection feature to the firewall rules management UI, allowing users to specify BGP communities for block/accept policies. Updated the backend to support reading firewall scripts from a specified directory, improving script management. Enhanced documentation to clarify the new community functionality and its implications for firewall rules. Additionally, introduced tests for the firewall script endpoints to ensure proper functionality.
20 lines
728 B
Bash
20 lines
728 B
Bash
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
systemctl disable --now evobgp-firewall.timer 2>/dev/null || true
|
|
rm -f /etc/cron.d/evobgp-firewall
|
|
rm -f /etc/systemd/system/evobgp-firewall.service /etc/systemd/system/evobgp-firewall.timer
|
|
systemctl daemon-reload 2>/dev/null || true
|
|
|
|
nft delete table inet evobgp_blocklist 2>/dev/null || true
|
|
ipset destroy evobgp_blocklist_v4 2>/dev/null || true
|
|
iptables -D INPUT -m set --match-set evobgp_blocklist_v4 src -j DROP 2>/dev/null || true
|
|
|
|
rm -f /usr/local/sbin/evobgp-firewall.sh /usr/local/sbin/evobgp-firewall-uninstall.sh
|
|
rm -rf /var/lib/evobgp-firewall
|
|
if [[ "${EVOBGP_UNINSTALL_REMOVE_CONF:-}" == "1" ]]; then
|
|
rm -f /etc/evobgp/firewall.conf
|
|
fi
|
|
|
|
echo "evobgp-firewall uninstalled"
|