🌴 Sync 2026-03-05 23:51:42

luci-app-shadowrt/root/usr/share/shadowrt/container/overwrite/0/etc/firewall.user

@@ -0,0 +1,12 @@
+# This file is interpreted as shell script.
+# Put your custom iptables rules here, they will
+# be executed with each firewall (re-)start.
+
+# Internal uci firewall chains are flushed and recreated on reload, so
+# put custom rules into the root chains e.g. INPUT or FORWARD or into the
+# special user chains, e.g. input_wan_rule or postrouting_lan_rule.
+
+# workaround route shortcut issue in shadowrt clones on openwrt 22.03
+iptables -t mangle -I PREROUTING -p tcp -m conntrack --ctstate RELATED,ESTABLISHED -m socket -j ACCEPT || true
+ip6tables -t mangle -I PREROUTING -p tcp -m conntrack --ctstate RELATED,ESTABLISHED -m socket -j ACCEPT || true
+

luci-app-shadowrt/root/usr/share/shadowrt/container/overwrite/0/etc/uci-defaults/zzz-dockerenv

@@ -0,0 +1,38 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	set quickstart.main.disable_dhns=1
+	commit quickstart
+EOF
+
+uci -q batch <<-EOF >/dev/null
+	set argon.@global[0].primary='#5b7e99'
+	set argon.@global[0].dark_primary='#337d8c'
+	commit argon
+EOF
+
+GATEWAY=
+DNS=
+DHCP_SERVER=
+
+[ -n "$GATEWAY" ] && uci set network.lan.gateway="$GATEWAY"
+if [ -n "$DNS" ]; then
+	for dns in $DNS; do
+		uci add_list network.lan.dns="$dns"
+	done
+fi
+uci commit network
+
+uci -q batch <<-EOF >/dev/null
+	del dhcp.lan.ra
+	del dhcp.lan.ra_slaac
+	del dhcp.lan.ra_flags
+	del dhcp.lan.dhcpv6
+EOF
+
+if [ -z "$DHCP_SERVER" ]; then
+	uci set dhcp.lan.ignore='1'
+fi
+uci commit dhcp
+
+exit 0