benvin
af7117faae
- Wire policy CRUD (the policies table existed from 0001 but had no endpoint; policies already render in the compiler, so this closes that loop). - Add blrules (blacklist/whitelist) and conntrack resources: migration 0005, model types, id-keyed store CRUD (generation-bumping), and REST handlers. Compiler rendering of blrules/conntrack into device configs is a tracked follow-up (policy already renders).
33 lines
1.2 KiB
SQL
33 lines
1.2 KiB
SQL
-- Global-compiled long-tail sections: blrules (blacklist/whitelist, processed
|
|
-- before normal rules) and conntrack (connection-tracking control). The policies
|
|
-- table already exists (migration 0001); this migration only adds the two new
|
|
-- tables — policy CRUD is wired on the existing table.
|
|
|
|
CREATE TABLE blrules (
|
|
id BIGINT GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
|
|
priority INT NOT NULL DEFAULT 0,
|
|
action TEXT NOT NULL,
|
|
source TEXT NOT NULL DEFAULT '',
|
|
dest TEXT NOT NULL DEFAULT '',
|
|
proto TEXT NOT NULL DEFAULT '',
|
|
dport JSONB NOT NULL DEFAULT '[]'::jsonb,
|
|
sport JSONB NOT NULL DEFAULT '[]'::jsonb,
|
|
log TEXT NOT NULL DEFAULT '',
|
|
comment TEXT NOT NULL DEFAULT ''
|
|
);
|
|
|
|
CREATE TABLE conntrack (
|
|
id BIGINT GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
|
|
priority INT NOT NULL DEFAULT 0,
|
|
action TEXT NOT NULL,
|
|
source TEXT NOT NULL DEFAULT '',
|
|
dest TEXT NOT NULL DEFAULT '',
|
|
proto TEXT NOT NULL DEFAULT '',
|
|
dport JSONB NOT NULL DEFAULT '[]'::jsonb,
|
|
sport JSONB NOT NULL DEFAULT '[]'::jsonb,
|
|
chain TEXT NOT NULL DEFAULT '',
|
|
helper TEXT NOT NULL DEFAULT '',
|
|
"user" TEXT NOT NULL DEFAULT '',
|
|
comment TEXT NOT NULL DEFAULT ''
|
|
);
|