hostfw

type Backend string

type Command struct {
	Name string   `json:"name"`
	Args []string `json:"args"`
}

type Deps struct {
	LookPath func(string) (string, error)
	Run      Runner
}

type Plan struct {
	Backend Backend   `json:"backend"`
	Ports   []int     `json:"ports"`
	Add     []Command `json:"add"`
	Undo    []Command `json:"undo"`
	// Persistent is false when the rule is lost on reboot unless the operator saves the ruleset.
	Persistent bool   `json:"persistent"`
	Note       string `json:"note,omitempty"`
	// Refusal is set when the change must not be made from here; Add is then empty.
	Refusal string `json:"refusal,omitempty"`
}

type Result struct {
	Plan   Plan   `json:"plan"`
	Status Status `json:"status"`
	// Undo are the commands that reverse exactly what was added.
	Undo []Command `json:"undo"`
}

type Runner func(ctx context.Context, name string, args ...string) ([]byte, error)

type Status struct {
	Backend Backend `json:"backend"`
	// Installed is true when a firewall tool exists on the host.
	Installed bool `json:"installed"`
	// Active is true when the firewall filters incoming traffic.
	Active bool `json:"active"`
	// Unknown is true when a tool exists but could not be read, usually for lack of privileges.
	Unknown bool `json:"unknown"`
	// Open reports, per web port, whether incoming TCP is allowed.
	Open   map[int]bool `json:"open"`
	Detail string       `json:"detail"`
	// contains filtered or unexported fields
}