summaryrefslogtreecommitdiff
path: root/sys/net/fail2ban.nix
diff options
context:
space:
mode:
authorAlejandro Soto <alejandro@34project.org>2025-01-01 16:46:08 -0600
committerAlejandro Soto <alejandro@34project.org>2025-01-01 21:49:38 -0600
commit083c1d226a03fb84fb1e717adc1581049df689cf (patch)
tree4df12bdf7d4560023160359035f10c2217df6e79 /sys/net/fail2ban.nix
parentb1b3a635db095a54c1863b01b7ecb290e539c152 (diff)
sys: refactor address and network number management
Diffstat (limited to 'sys/net/fail2ban.nix')
-rw-r--r--sys/net/fail2ban.nix11
1 files changed, 6 insertions, 5 deletions
diff --git a/sys/net/fail2ban.nix b/sys/net/fail2ban.nix
index be79de5..998de21 100644
--- a/sys/net/fail2ban.nix
+++ b/sys/net/fail2ban.nix
@@ -1,6 +1,7 @@
{ lib, config, pkgs, ... }:
with lib; let
cfg = config.local.net.fail2ban;
+ inherit (config.local) nets;
in
{
options.local.net.fail2ban = {
@@ -21,12 +22,12 @@ in
overalljails = true;
};
- #TODO: No quemar
ignoreIP = [
- "10.34.0.0/16"
- "fd34:2::/64"
- "37.205.12.147"
- "2a03:3b40:fe:3ec::1"
+ nets.vpn0.v4.cidr
+ nets.gate0.v4.cidr
+ nets.gate0.v6.cidr
+ nets.gate-public.hosts.gate.v4.address
+ nets.gate-public.hosts.gate.v6.address
];
};
};