feat(role): Initial commit

files/_current_user_home_/.condarc

@@ -0,0 +1 @@
+auto_activate_base: false

files/etc/systemd/system/update-firewall-source.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=firewalld direct rules generator
+After=multi-user.target network-online.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=no
+Environment='PATH=/usr/local/sbin:/usr/local/bin:/usr/bin' 'UFS_LOGLEVEL=INFO'
+ExecStart=/opt/miniconda3/envs/update-firewall-source/bin/python /opt/python/update-firewall-source/master/update-firewall-source.py
+
+[Install]
+WantedBy=multi-user.target

files/etc/systemd/system/update-firewall-source.service.example

@@ -0,0 +1,12 @@
+[Unit]
+Description=firewalld direct rules generator
+After=multi-user.target network-online.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=no
+Environment='PATH=/usr/local/sbin:/usr/local/bin:/usr/bin' 'UFS_LOGLEVEL=INFO'
+ExecStart=/opt/miniconda3/envs/update-firewall-source/bin/python /opt/python/update-firewall-source/master/update-firewall-source.py
+
+[Install]
+WantedBy=multi-user.target

files/etc/systemd/system/update-firewall-source.timer

@@ -0,0 +1,13 @@
+[Unit]
+Description=Run firewalld direct rules generator
+
+[Timer]
+OnCalendar=
+OnCalendar=4,5,6:00,15,30,45 Europe/Berlin
+OnCalendar=1,10,14,18,22:00 Europe/Berlin
+OnBootSec=5min
+RandomizedDelaySec=2min
+Persistent=true
+
+[Install]
+WantedBy=timers.target

files/etc/systemd/system/update-firewall-source.timer.example

@@ -0,0 +1,13 @@
+[Unit]
+Description=Run firewalld direct rules generator
+
+[Timer]
+OnCalendar=
+OnCalendar=4,5,6:00,15,30,45 Asia/Shanghai
+OnCalendar=1,10,14,18,22:00 Asia/Shanghai
+OnBootSec=5min
+RandomizedDelaySec=2min
+Persistent=true
+
+[Install]
+WantedBy=timers.target

files/opt/python/update-firewall-source/master/config.ini

@@ -0,0 +1,27 @@
+[DEFAULT]
+target = ACCEPT
+addr =
+ports = 80, 443
+proto = tcp
+state = NEW
+do_ipv6 = true
+firewalld_direct_file_abs = /etc/firewalld/direct.xml
+restart_firewalld_after_change = true
+
+[home.seneve.de]
+addr = home.seneve.de
+ports = 22, 80, 443
+
+[fornjot.uberspace.de IPv4/6 connectivity testing]
+addr = fornjot.uberspace.de
+ports = 22, 80, 443
+
+[allow-anyone-to-access-mail-services]
+ports = 143, 993, 110, 995, 25, 465, 587
+
+[deny-all]
+target = DROP
+addr =
+ports =
+proto =
+state =