-- trifid-api, an open source reimplementation of the Defined Networking nebula management server.
--     Copyright (C) 2023 c0repwn3r
--
--     This program is free software: you can redistribute it and/or modify
--     it under the terms of the GNU General Public License as published by
--     the Free Software Foundation, either version 3 of the License, or
--     (at your option) any later version.
--
--     This program is distributed in the hope that it will be useful,
--     but WITHOUT ANY WARRANTY; without even the implied warranty of
--     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
--     GNU General Public License for more details.
--
--     You should have received a copy of the GNU General Public License
--     along with this program.  If not, see <https:--www.gnu.org/licenses/>.

CREATE TABLE roles_firewall_rules (
    id SERIAL NOT NULL PRIMARY KEY,
    role SERIAL NOT NULL REFERENCES roles(id),
    protocol INTEGER NOT NULL, -- 0: any 1: tcp 2: udp 3: icmp
    port_range_start INTEGER NOT NULL, -- min: 1 max: 65535. Ignored if protocol==3
    port_range_end INTEGER NOT NULL, -- min: 1 max: 65535, must be greater than or equal to port_range_start. Ignored if protocol==3
    allow_from INTEGER NOT NULL, -- Allow traffic goverened by above rules from who?
    -- -1: anybody
    -- (a role, anything else): only that role
    description VARCHAR(4096) NOT NULL
);