Commit graph

1 commit

Author SHA1 Message Date
aa0aec2d2c feat: port PF module with glasspane VNC (Sam & Claude)
- Add shell-pf.sh module for PF firewall setup
- Add NETWORKING.md with glasspane documentation
- Update MODULE-MANIFEST.md for 8 modules
- Update integration-test.sh for 8 modules
- Update firstboot.sh to source and call PF module

PF features:
  - Block-all default
  - SSH brute-force protection
  - Jail NAT (192.168.0.0/16 supernet)
  - Glasspane VNC (port 5900 via Tailscale only)
  - pf_reload rc.d service for cold boot race
2026-06-04 20:04:22 +02:00