fix/exec-umask 2cd66dc

two.nft RawHistoryFolder

1table inet ermite_runner
2delete table inet ermite_runner
3table inet ermite_runner {
4	set blocked_v4 {
5		type ipv4_addr
6		flags interval
7		elements = { 0.0.0.0/8, 10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.0.0/24, 192.0.2.0/24, 192.168.0.0/16, 198.18.0.0/15, 198.51.100.0/24, 203.0.113.0/24, 224.0.0.0/4, 240.0.0.0/4 }
8	}
9	chain input {
10		type filter hook input priority filter; policy accept;
11		iifname "ertap*" meta nfproto ipv6 drop
12		iifname "erbr*" meta nfproto ipv6 drop
13		ip daddr 10.200.0.5 udp dport 53 iifname != "erbr1" drop
14		ip daddr 10.200.0.5 tcp dport 53 iifname != "erbr1" drop
15		ip daddr 10.200.0.1 udp dport 53 iifname != "ertap0" drop
16		ip daddr 10.200.0.1 tcp dport 53 iifname != "ertap0" drop
17		iifname "erbr1" ip saddr 10.200.0.6 ip daddr 10.200.0.5 udp dport 53 accept
18		iifname "erbr1" ip saddr 10.200.0.6 ip daddr 10.200.0.5 tcp dport 53 accept
19		iifname "erbr1" drop
20		iifname "ertap0" ip saddr 10.200.0.2 ip daddr 10.200.0.1 udp dport 53 accept
21		iifname "ertap0" ip saddr 10.200.0.2 ip daddr 10.200.0.1 tcp dport 53 accept
22		iifname "ertap0" drop
23		iifname "ertap*" drop
24		iifname "erbr*" drop
25	}
26	chain forward {
27		type filter hook forward priority filter; policy accept;
28		iifname "ertap*" meta nfproto ipv6 drop
29		iifname "erbr*" meta nfproto ipv6 drop
30		iifname "erbr1" ip saddr != 10.200.0.6 drop
31		iifname "erbr1" ip daddr @blocked_v4 drop
32		iifname "ertap0" ip saddr != 10.200.0.2 drop
33		iifname "ertap0" ip daddr @blocked_v4 drop
34		iifname != { "ertap*", "erbr*" } oifname { "ertap*", "erbr*" } ct state established,related accept
35		oifname "ertap*" drop
36		oifname "erbr*" drop
37		iifname "erbr1" accept
38		iifname "ertap0" accept
39		iifname "ertap*" drop
40		iifname "erbr*" drop
41	}
42	chain postrouting {
43		type nat hook postrouting priority srcnat; policy accept;
44		ip saddr 10.200.0.6 oifname != "erbr1" masquerade
45		ip saddr 10.200.0.2 oifname != "ertap0" masquerade
46	}
47}

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 4

Tags 11

↑↓ moveenter openesc close