1 files changed, 6 insertions(+), 0 deletions(-)

M sqmeta/IMGBUILD

@@ 20,12 20,14 @@ packages="
 
   openssh
   qemu-guest-agent
+  ufw
 "
 
 services="
   networking:boot
   sshd
   qemu-guest-agent
+  ufw
 "
 
 passwords="


@@ 77,4 79,8 @@ provision() {
     echo "Not setting up bootloader"
     ;;
   esac
+
+  ufw default deny incoming
+  ufw limit SSH
+  ufw enable
 }