skills.rest
christopherlouet
christopherlouetCOMMUNITY
Explore all skills by this author →
GitHub

ops-opnsense

Configure OPNsense firewall interfaces, rules, NAT, and DHCP with Terraform.

5|Updated Jan 15, 2026
Search Tags:#security#vpn#terraform#network#firewall#nat#opnsense
One-click install
npx skills add https://github.com/christopherlouet/claude-base --skill ops-opnsense
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ops-opnsense
Source: https://github.com/christopherlouet/claude-base/tree/main/.claude/skills/ops-opnsense
Command: npx skills add https://github.com/christopherlouet/claude-base --skill ops-opnsense

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) and assets (resource) components.

What problem does it solve?

This Skill streamlines the deployment and management of OPNsense network devices through declarative Terraform configuration, reducing manual setup errors and saving configuration time.

Core Features & Use Cases

  • Network Setup and Management: Configure interfaces, NAT, firewall rules, DHCP, and DNS services efficiently.
  • Security and Access Control: Implement mandatory anti-lockout rules and default deny policies to ensure secure operation.
  • Use Case: For a network administrator, automatically provisioning a secure OPNsense firewall with predefined rules, NATs, and services to quickly establish a reliable network perimeter.

Quick Start

Use the ops-opnsense skill to create a configuration file that sets up the WAN and LAN interfaces, firewall rules, NAT port forwards, and DHCP services as outlined in the documentation.

Frequently Asked Questions about ops-opnsense

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure OPNsense firewall rules and NAT policies using Terraform?▼

You configure OPNsense firewall rules and NAT policies declaratively using Terraform to define interfaces, port forwards, and default deny policies, ensuring a reproducible and audit-friendly network perimeter setup.

Can I automate OPNsense network interface and DHCP setup without manual web UI configuration?▼

Yes, automating OPNsense network interface and DHCP setup is achievable through declarative Terraform configuration, which eliminates manual web UI errors and ensures secure, reproducible network device deployments.

Does Terraform support managing VPN integration and DNS services on OPNsense devices?▼

Terraform supports managing VPN integration and DNS services on OPNsense devices by declaratively provisioning these configurations alongside firewall rules, ensuring consistent and secure ongoing network management.

What is the best way to ensure secure OPNsense deployment and prevent lockout when applying firewall rules?▼

The best way to ensure secure OPNsense deployment is applying mandatory anti-lockout rules and default deny policies declaratively, which guarantees secure operation and prevents accidental access loss during firewall configuration.

Are there limitations when using declarative Terraform for OPNsense firewall management compared to manual configuration?▼

Declarative Terraform for OPNsense targets network engineers and focuses on reproducible, audit-friendly setups, but may have limitations managing highly dynamic or real-time network changes compared to direct manual configuration.

Related Skills

Explore More Software Engineering Skills→
kngender5kngender5

opnsense-admin

Automate OPNsense firewall rule, NAT, VLAN, DNS, IDS/IPS, VPN, and backup management via REST API and SSH.

Community
Advanced
rloisellrloisell
7

network-security

Define ACLs, NAT/PAT, IPsec VPNs, and zone-based firewall policies for Cisco IOS/IOS-XE and Linux iptables.

Community
Advanced
jdiegosierrajdiegosierra
1

terraform

Provides Terraform and GCP users with curated, actionable answersbbaased on official documentation and real-world experience.

Community
Intermediate
iulianditaiuliandita
2

firewall-appliance

Manage and troubleshoot OPNsense and pfSense firewalls via SSH.

Community
Advanced