ansible-personal/roles/common/files/update-firehol-nftables.timer

[Unit]
Description=Update FireHOL lists

[Timer]
# Once a day at midnight
OnCalendar=*-*-* 00:00:00
# Add a random delay of 0–3600 seconds
RandomizedDelaySec=3600
Persistent=true

[Install]
WantedBy=timers.target
-												roles/common: Add initial support for nftables on Debian 11

I will try using nftables directly instead of via firewalld as of
Debian 11 as it is the replacement for the iptables/ipset stack in
recent years and is easier to work with.

This also includes a systemd service, timer, and script to update
the spamhaus DROP lists as nftables sets.

Still need to add fail2ban support.

											
										
										
											2021-07-26 13:09:41 +03:00
+								[Unit]
-												roles/common: rework firewall

Use firehol instead of all the others. AbuseIPDB.com can't be upd-
ated automatically, Abuse.ch is no longer maintained, and Spamhaus
is already in firehol.

											
										
										
											2025-01-27 23:04:00 +03:00
+								Description=Update FireHOL lists
-												roles/common: Add initial support for nftables on Debian 11

I will try using nftables directly instead of via firewalld as of
Debian 11 as it is the replacement for the iptables/ipset stack in
recent years and is easier to work with.

This also includes a systemd service, timer, and script to update
the spamhaus DROP lists as nftables sets.

Still need to add fail2ban support.

											
										
										
											2021-07-26 13:09:41 +03:00
 								[Timer]
 								# Once a day at midnight
 								OnCalendar=*-*-* 00:00:00
 								# Add a random delay of 0–3600 seconds
 								RandomizedDelaySec=3600
 								Persistent=true
 								[Install]
 								WantedBy=timers.target