From 7ddf55a9e688f159afda54b1da8ad464493e7fb1 Mon Sep 17 00:00:00 2001
From: Nico Schottelius <nico@nico-notebook.schottelius.org>
Date: Wed, 1 Jul 2026 13:08:34 +0200
Subject: [PATCH] nana

---
 openwrt/openwrt-default-firewall.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/openwrt/openwrt-default-firewall.sh b/openwrt/openwrt-default-firewall.sh
index fe6badf..6b29ede 100644
--- a/openwrt/openwrt-default-firewall.sh
+++ b/openwrt/openwrt-default-firewall.sh
@@ -1,5 +1,6 @@
 #!/bin/sh
 # 2022-01-21, Nico Schottelius
+# 2026-05-25: updated to only allow incoming SSH and to set a password
 
 # Firewall configuration
 if ! uci show firewall | grep "name='Allow-SSH'"; then
@@ -38,8 +39,8 @@ uci set firewall.@rule[-1].name='Allow-Remote-SSH-Access'
 uci set firewall.@rule[-1].src='wan'
 uci set firewall.@rule[-1].proto='tcp'
 uci set firewall.@rule[-1].dest_port='22'
-uci set firewall.@rule[-1].enabled='0'
 uci set firewall.@rule[-1].target='ACCEPT'
+uci commit
 fi