feat: added ability to add custom nftables rules

2025-12-29 16:51:32 +03:00
parent af4f78663d
commit 7e4795e99f
2 changed files with 7 additions and 0 deletions
@@ -7,6 +7,9 @@ security_firewall_allowed_ports:
  - "443/udp"
  - "53/udp"

+# Optional per-host nftables additions appended verbatim to the rendered config
+security_nftables_custom_config: ""
+
 security_ssh_port: 2424
 security_fail2ban_enabled: true
 security_fail2ban_custom_configuration_template: "jail.local.j2"
@@ -32,3 +32,7 @@ table inet filter {
        policy accept;
    }
 }
+
+{% if security_nftables_custom_config is defined and security_nftables_custom_config | trim %}
+{{ security_nftables_custom_config | trim }}
+{% endif %}