Merge pull request #107 from YunoHost/no-need-to-open-port

Add notes about this firewall thing which is creating security issues…
This commit is contained in:
Maniack Crudelis 2019-12-06 18:29:10 +01:00 committed by GitHub
commit 35414b8baa
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -87,12 +87,17 @@ ynh_script_progression --message="Configuring firewall..." --time --weight=1
### If you're not using these lines: ### If you're not using these lines:
### - Remove the section "CLOSE A PORT" in the remove script ### - Remove the section "CLOSE A PORT" in the remove script
# Find a free port # Find an available port
port=$(ynh_find_port --port=8095) port=$(ynh_find_port --port=8095)
# Open this port
ynh_exec_warn_less yunohost firewall allow --no-upnp TCP $port
ynh_app_setting_set --app=$app --key=port --value=$port ynh_app_setting_set --app=$app --key=port --value=$port
# Optional: Expose this port publicly
# (N.B. : you only need to do this if the app actually needs to expose the port publicly.
# If you do this and the app doesn't actually need you are CREATING SECURITY HOLES IN THE SERVER !)
# Open the port
# ynh_exec_warn_less yunohost firewall allow --no-upnp TCP $port
#================================================= #=================================================
# INSTALL DEPENDENCIES # INSTALL DEPENDENCIES
#================================================= #=================================================