mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-07-09 14:16:07 +00:00
MHSanaei
9b91f0f42e
Fold the standalone 3x-ui-docs project (Next.js 16 + Fumadocs, deployed to docs.sanaei.dev) into docs/ so the panel and its documentation share a single source of truth, the way sing-box keeps its docs in-tree. The old repo becomes redundant and can be retired. - Import the full site under docs/ (app, components, content, lib, public, scripts, config). The self-contained pnpm project sits alongside the existing engineering notes with no filename collisions. - Re-point "Edit on GitHub" links from MHSanaei/3x-ui-docs to this repo's docs/content/docs path (docs/lib/shared.ts, docs/app/.../page.tsx). - Add docs-ci.yml and docs-deploy.yml under .github/workflows/, scoped to docs/** and run with working-directory: docs, since GitHub only runs workflows from the repo-root .github/. deploy-static.yml's GitHub Pages publish (CNAME docs.sanaei.dev) carries over unchanged. Follow-up (outside this commit): attach the docs.sanaei.dev custom domain to this repository's Pages (or set the Vercel project's root directory to docs), confirm the site is live from the monorepo, then delete MHSanaei/3x-ui-docs.
39 lines
1.4 KiB
TypeScript
39 lines
1.4 KiB
TypeScript
import { describe, it, expect } from 'vitest';
|
|
import { buildUfwCommands, buildNftablesRuleset, type FirewallOptions } from './firewall';
|
|
|
|
const options: FirewallOptions = {
|
|
allowSsh: true,
|
|
sshPort: 22,
|
|
ports: [
|
|
{ port: 443, protocol: 'tcp', label: 'inbound' },
|
|
{ port: 51820, protocol: 'udp', label: 'wireguard' },
|
|
{ port: 2053, protocol: 'both', label: 'panel' },
|
|
],
|
|
};
|
|
|
|
describe('buildUfwCommands', () => {
|
|
it('emits ufw allow rules per protocol plus ssh and enable', () => {
|
|
const out = buildUfwCommands(options);
|
|
expect(out).toContain('ufw allow 22/tcp');
|
|
expect(out).toContain('ufw allow 443/tcp');
|
|
expect(out).toContain('ufw allow 51820/udp');
|
|
// 'both' expands to tcp + udp
|
|
expect(out).toContain('ufw allow 2053/tcp');
|
|
expect(out).toContain('ufw allow 2053/udp');
|
|
expect(out.trim().endsWith('ufw enable')).toBe(true);
|
|
});
|
|
});
|
|
|
|
describe('buildNftablesRuleset', () => {
|
|
it('emits a drop-by-default inet table with accept rules', () => {
|
|
const out = buildNftablesRuleset(options);
|
|
expect(out).toContain('table inet filter');
|
|
expect(out).toContain('policy drop;');
|
|
expect(out).toContain('ct state established,related accept');
|
|
expect(out).toContain('tcp dport 443 accept');
|
|
expect(out).toContain('udp dport 51820 accept');
|
|
expect(out).toContain('tcp dport 2053 accept');
|
|
expect(out).toContain('udp dport 2053 accept');
|
|
});
|
|
});
|