CHANGELOG.md: update for firewall features

Signed-off-by: Richard Tollerton <[email protected]>
ni · Dec 16, 2024 · f5a7254 · f5a7254
1 parent 6c0fe21
commit f5a7254
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
@@ -15,6 +15,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * The `configure` operation now installs `libpwquality` and enables password quality checks. (#11)
 * The `configure` operation now installs and configures `tmux` as the shell, including adding a 15 minute inactivity lock (#17)
 * Added a `verify` operation to non-destructively check that the system is still SNAC-compliant. (#15)
+* The `configure` operation installs `firewalld` with explicit control over both inbound and outbound
+  traffic. (#29)
+* `firewalld` is configured to permit selected NI service traffic over wireguard. (#50)
 
 ### Changed