aminda-nocron-reboot.service: apparently firewall-cmd needs home zone specified separately when NetworkManager is present

This commit is contained in:
Aminda Suomalainen 2024-08-15 09:01:38 +03:00
parent 4685efef64
commit b1a25ac3a2
Signed by: Mikaela
SSH Key Fingerprint: SHA256:CXLULpqNBdUKB6E6fLA1b/4SzG0HvKD19PbIePU175Q
1 changed files with 9 additions and 0 deletions

View File

@ -21,14 +21,23 @@ ExecStartPre=-/usr/bin/systemctl start firewalld.service
ExecStart=-/usr/bin/systemctl enable --now systemd-zram-setup@zram0.service ExecStart=-/usr/bin/systemctl enable --now systemd-zram-setup@zram0.service
# Ensure we really allow ICMPv6 on FEDORA (or firewalld). Also other essential services. # Ensure we really allow ICMPv6 on FEDORA (or firewalld). Also other essential services.
ExecStart=-/usr/bin/firewall-cmd --add-protocol=ipv6-icmp ExecStart=-/usr/bin/firewall-cmd --add-protocol=ipv6-icmp
ExecStart=-/usr/bin/firewall-cmd --add-protocol=ipv6-icmp --zone=home
ExecStart=-/usr/bin/firewall-cmd --add-service=ssh --permanent ExecStart=-/usr/bin/firewall-cmd --add-service=ssh --permanent
ExecStart=-/usr/bin/firewall-cmd --add-service=ssh --permanent --zone=home
ExecStart=-/usr/bin/firewall-cmd --add-service=mosh --permanent ExecStart=-/usr/bin/firewall-cmd --add-service=mosh --permanent
ExecStart=-/usr/bin/firewall-cmd --add-service=mosh --permanent --zone=home
ExecStart=-/usr/bin/firewall-cmd --add-service=ntp --permanent ExecStart=-/usr/bin/firewall-cmd --add-service=ntp --permanent
ExecStart=-/usr/bin/firewall-cmd --add-service=ntp --permanent --zone=home
ExecStart=-/usr/bin/firewall-cmd --add-service=syncthing --permanent ExecStart=-/usr/bin/firewall-cmd --add-service=syncthing --permanent
ExecStart=-/usr/bin/firewall-cmd --add-service=syncthing --permanent --zone=home
ExecStart=-/usr/bin/firewall-cmd --add-service=mdns --permanent ExecStart=-/usr/bin/firewall-cmd --add-service=mdns --permanent
ExecStart=-/usr/bin/firewall-cmd --add-service=mdns --permanent --zone=home
ExecStart=-/usr/bin/firewall-cmd --add-service=kdeconnect --permanent ExecStart=-/usr/bin/firewall-cmd --add-service=kdeconnect --permanent
ExecStart=-/usr/bin/firewall-cmd --add-service=kdeconnect --permanent --zone=home
ExecStart=-/usr/bin/firewall-cmd --permanent --add-port=9001/udp ExecStart=-/usr/bin/firewall-cmd --permanent --add-port=9001/udp
ExecStart=-/usr/bin/firewall-cmd --permanent --add-port=9001/udp --zone=home
ExecStart=-/usr/bin/firewall-cmd --permanent --add-port=6771/udp ExecStart=-/usr/bin/firewall-cmd --permanent --add-port=6771/udp
ExecStart=-/usr/bin/firewall-cmd --permanent --add-port=6771/udp --zone=home
# 3rd party Xbox controller initialization. See Mikaela/gist/gayming/ # 3rd party Xbox controller initialization. See Mikaela/gist/gayming/
#ExecStart=-/root/fixcontroller.py #ExecStart=-/root/fixcontroller.py
# This is actually in the delayed variant of this service, but anyway # This is actually in the delayed variant of this service, but anyway