Initial commit
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,15 @@
|
||||
#!/usr/sbin/nft -f
|
||||
# Only your Omarchy machine may reach the robot's audio (4713) and MCP (8765) ports.
|
||||
# Everything else, SSH included, is left alone. __HOST_IP__ is filled in by install.sh.
|
||||
|
||||
table inet robot
|
||||
delete table inet robot
|
||||
|
||||
table inet robot {
|
||||
chain input {
|
||||
type filter hook input priority 0; policy accept;
|
||||
iif "lo" accept
|
||||
ip saddr __HOST_IP__ tcp dport { 4713, 8765 } accept
|
||||
tcp dport { 4713, 8765 } drop
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user