Proxmos script fix
This commit is contained in:
@@ -30,24 +30,29 @@ sudo /etc/init.d/zabbix-agent status
|
|||||||
#zabbix_agentd -V
|
#zabbix_agentd -V
|
||||||
|
|
||||||
echo -e "${C_LGn}Autoupdate IPTable rules ...${RES}"
|
echo -e "${C_LGn}Autoupdate IPTable rules ...${RES}"
|
||||||
tee /etc/systemd/system/iptables-restore-custom.service > /dev/null << EOF
|
tee /etc/systemd/system/iptables-restore-custom.service > /dev/null <<'EOF'
|
||||||
[Unit]
|
[Unit]
|
||||||
Description=Restore iptables rules after Proxmox Firewall
|
Description=Restore custom IPv4 NAT rules after Proxmox Firewall
|
||||||
After=pve-firewall.service
|
|
||||||
Wants=network-online.target
|
Wants=network-online.target
|
||||||
|
After=network-online.target pve-firewall.service
|
||||||
ConditionPathExists=/etc/iptables/rules.v4
|
ConditionPathExists=/etc/iptables/rules.v4
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
ExecStart=/bin/sh -c '/sbin/iptables-restore < /etc/iptables/rules.v4'
|
ExecStart=/bin/sh -c '/sbin/iptables-restore -T nat < /etc/iptables/rules.v4'
|
||||||
RemainAfterExit=yes
|
RemainAfterExit=yes
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
systemctl enable --now iptables-restore-custom.service
|
systemctl daemon-reload
|
||||||
|
|
||||||
|
# Не даём стандартному сервису попытаться загрузить полный PVE snapshot.
|
||||||
|
systemctl disable netfilter-persistent.service 2>/dev/null || true
|
||||||
|
|
||||||
|
# Включить только на будущие загрузки.
|
||||||
|
systemctl enable iptables-restore-custom.service
|
||||||
|
|
||||||
echo -e "${C_LGn}Installing Node Exporter ...${RES}"
|
echo -e "${C_LGn}Installing Node Exporter ...${RES}"
|
||||||
cd $HOME && \
|
cd $HOME && \
|
||||||
|
|||||||
Reference in New Issue
Block a user