From 5c1f0e17b8b0e9ebba6078854c1224e7f5d93ac2 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Sun, 30 Nov 2025 11:50:29 +0200
Subject: pf changes

---
 templates/etc_pf.conf.j2 | 27 ---------------------------
 1 file changed, 27 deletions(-)
 delete mode 100644 templates/etc_pf.conf.j2

(limited to 'templates/etc_pf.conf.j2')

diff --git a/templates/etc_pf.conf.j2 b/templates/etc_pf.conf.j2
deleted file mode 100644
index 87ae43a..0000000
--- a/templates/etc_pf.conf.j2
+++ /dev/null
@@ -1,27 +0,0 @@
-lan_if = "lan0"
-wan_if = "brwan0"
-
-# Default policy
-set skip on lo
-# Allow all traffic on $wan_if. Proper firewall rules are implemented in the ingress jail.
-set skip on $wan_if
-set block-policy return
-scrub in
-
-# Default block all
-block in all
-
-# Allow all outbound traffic
-pass out all keep state
-
-# Allow inbound HTTP/HTTPS on lan0
-pass in on $lan_if proto tcp from any to ($lan_if) port { 80, 443 } keep state
-
-# Allow SSH only on lan0
-pass in on $lan_if proto tcp from any to ($lan_if) port 22 keep state
-
-# Allow all ICMPv6 (required for IPv6 to function correctly)
-pass inet6 proto ipv6-icmp from any to any keep state
-
-# Allow all ICMPv4
-pass inet proto icmp from any to any keep state
-- 
cgit v1.3