fickit: Add scores-sync-zqds to frontend

fickit-frontend.yml

@@ -190,6 +190,17 @@ services:
         - /var/lib/fic/startingblock
         - /var/lib/fic/submissions
         - /var/lib/fic/teams
+  - name: fic-remote-scores-sync-zqds
+    image: nemunaire/fic-remote-scores-sync-zqds:latest
+    env:
+      - ZQDS_EVENTID=6109ae5acbb7b36b789c9330
+      - ZQDS_ROUNDID=612d3a5179fe4f747ea89274
+      - ZQDS_CLIENTID=
+      - ZQDS_CLIENTSECRET=
+    binds:
+      - /etc/hosts:/etc/hosts:ro
+      - /var/lib/fic/teams:/srv/TEAMS:ro
+    net: /run/netns/nginx
   - name: sshd
     image: nemunaire/rsync:5d1f678641de2197041f4bc4c745e7748bedab02
     capabilities:
@@ -336,6 +347,11 @@ files:
     source: configs/nsenter_process.sh
     mode: "0755"
 
+  - path: etc/resolv.conf
+    contents: |
+      nameserver 9.9.9.9
+    mode: "0444"
+
   - path: etc/dhcpcd.conf
     contents: |
       allowinterfaces internet
@@ -428,6 +444,9 @@ files:
       [0:0] -A OUTPUT -p icmp --icmp-type 0 -j ACCEPT
       [0:0] -A OUTPUT -p icmp --icmp-type 8 -j ACCEPT
       [0:0] -A OUTPUT -o bond-frontal -p udp -m udp --sport domain -j ACCEPT
+      [0:0] -A OUTPUT -o bond-frontal -d 9.9.9.9 -p udp -m udp --dport domain -j ACCEPT
+      [0:0] -A OUTPUT -o bond-frontal -d 9.9.9.9 -p tcp -m tcp --dport domain -j ACCEPT
+      [0:0] -A OUTPUT -o bond-frontal -d 94.23.5.143 -p tcp -m tcp --dport https -j ACCEPT
       [0:0] -A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
       [0:0] -A OUTPUT -o vethin-nginx -d 172.17.1.3 -p tcp -m conntrack --ctstate NEW -m tcp --dport 8080 -j ACCEPT
       [0:0] -A OUTPUT -o vethin-nginx -d 172.17.1.4 -p tcp -m conntrack --ctstate NEW -m tcp --dport 5556 -j ACCEPT