T

benvin 9aee3ad7eb Merge pull request 'Exclude sub-zone hosts from wildcard parent interfaces' (#39 ) from benvin/wildcard-subzone-exclusion into main

Reviewed-on: #39

2026-10-10 01:08:33 +11:00

.woodpecker

ci: use container-rpmbuilder image

2026-10-05 14:39:45 +11:00

cmd/tomswall

Revert agent generations that cut off the control plane

2026-10-05 13:46:20 +11:00

internal

Carve sub-zone host interfaces out of wildcard parent matches

2026-10-09 23:41:34 +11:00

packaging

Cap boot unit restarts so it fails open

2026-10-05 13:46:50 +11:00

scripts

Add release machinery: version bump, nfpm RPM, release-on-tag pipeline

2026-07-20 22:30:57 +10:00

.gitignore

Add comprehensive nftables compiler with shorewall feature parity

2026-07-01 23:56:44 +10:00

.pre-commit-config.yaml

Add PR CI pipelines (build, test, pre-commit)

2026-07-20 22:12:04 +10:00

DESIGN.md

Apply agent generations as a pending try with a revert timer

2026-10-05 13:52:32 +11:00

go.mod

bump google/nftables to v0.3.0

2026-10-03 22:56:20 +10:00

go.sum

bump google/nftables to v0.3.0

2026-10-03 22:56:20 +10:00

Makefile

Add release machinery: version bump, nfpm RPM, release-on-tag pipeline

2026-07-20 22:30:57 +10:00

README.md

Fix end-of-file newline (pre-commit)

2026-07-20 22:19:11 +10:00

tomswall.example.yaml

Rate-limit log sites with shorewall LOGLIMIT

2026-10-04 15:52:37 +11:00

README.md

tomswall

Spiritual successor to shorewall — nftables firewall manager using google/nftables

Releases 6

v0.5.0 Latest

2026-10-09 23:28:54 +11:00

Languages

Go 98.9%

Shell 0.7%

Makefile 0.4%