Add firewall management over SSH for UFW and iptables/ip6tables: view and edit rules and default policies, persist iptables rules, SSH lockout protection

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/main/main.js

@@ -13,6 +13,7 @@ const i18n = require('../i18n');
 const fido = require('./fido');
 const { VpnManager } = require('./vpn');
 const { DockerManager } = require('./docker');
+const { FirewallManager } = require('./firewall');
 const applyLanguage = () => i18n.setLanguage(store.get().settings.language, app.getLocale());
 
 let win;
@@ -63,6 +64,7 @@ const ssh = new SshManager(store, confirmHostKey, askSecret);
 const updater = new Updater(store, send);
 const vpn = new VpnManager(store, app.getPath('userData'));
 const docker = new DockerManager(ssh);
+const firewall = new FirewallManager(ssh);
 
 function createWindow() {
   win = new BrowserWindow({
@@ -208,6 +210,17 @@ handle('docker:action', (id, action, cid) => docker.action(id, action, cid));
 handle('docker:command', (id, kind, cid) => docker.command(id, kind, cid));
 handle('docker:close', (id) => docker.close(id));
 
+// ---------- Firewall ----------
+handle('firewall:open', async (id, hostRef) => {
+  const host = hostWithOverrides(hostRef);
+  if (await vpn.ensureForHost(host)) send('vpn:changed');
+  return firewall.open(id, host, () => send('firewall:closed', id));
+});
+handle('firewall:list', (id, backend) => firewall.list(id, backend));
+handle('firewall:ufw', (id, op, args) => firewall.ufw(id, op, args));
+handle('firewall:ipt', (id, op, args) => firewall.ipt(id, op, args));
+handle('firewall:close', (id) => firewall.close(id));
+
 // ---------- VPN ----------
 handle('vpn:status', () => vpn.status());
 handle('vpn:up', (id) => vpn.up(id));