#/bin/sh

set -e

main() {
    uci add firewall rule
    uci set firewall.@rule[-1].name='Allow SSH on WAN'
    uci set firewall.@rule[-1].src='wan'
    uci set firewall.@rule[-1].proto='tcp'
    uci set firewall.@rule[-1].dest_port='22'
    uci set firewall.@rule[-1].target='ACCEPT'

    uci add firewall rule
    uci set firewall.@rule[-1].name='Allow HTTP on WAN'
    uci set firewall.@rule[-1].src='wan'
    uci set firewall.@rule[-1].proto='tcp'
    uci set firewall.@rule[-1].dest_port='80'
    uci set firewall.@rule[-1].target='ACCEPT'

    uci add firewall rule
    uci set firewall.@rule[-1].name='Allow HTTPS on WAN'
    uci set firewall.@rule[-1].src='wan'
    uci set firewall.@rule[-1].proto='tcp'
    uci set firewall.@rule[-1].dest_port='443'
    uci set firewall.@rule[-1].target='ACCEPT'

    uci commit firewall
    service firewall restart

    # Forward DNS queries to public DNS
    uci -q delete dhcp.@dnsmasq[0].server
    uci add_list dhcp.@dnsmasq[0].server="8.8.8.8"
    uci add_list dhcp.@dnsmasq[0].server="8.8.4.4"
    
    uci commit dhcp
    service dnsmasq restart
}

main