add pkg firewalld and setup

scripts/chroot-setup.sh

@@ -141,6 +141,7 @@ options root=UUID=$(blkid $2 -s UUID -o value) rw ignore_loglevel
 EOF
 
 # enable services
+systemctl enable firewalld.service
 systemctl enable systemd-boot-update.service
 systemctl enable sddm.service
 systemctl enable NetworkManager.service

scripts/install-packages.sh

@@ -15,6 +15,9 @@ PKGS_TO_INSTALL=(base bash cron curl dhcpcd dnsutils doas efibootmgr findutils g
 # power management
 PKGS_TO_INSTALL+=(acpi_call iasl)
 
+# firewall
+PKGS_TO_INSTALL+=(firewalld)
+
 # add-on
 PKGS_TO_INSTALL+=(flatpak ffmpeg light)