summaryrefslogtreecommitdiff
path: root/sys/net/fail2ban.nix
diff options
context:
space:
mode:
Diffstat (limited to 'sys/net/fail2ban.nix')
-rw-r--r--sys/net/fail2ban.nix11
1 files changed, 6 insertions, 5 deletions
diff --git a/sys/net/fail2ban.nix b/sys/net/fail2ban.nix
index be79de5..998de21 100644
--- a/sys/net/fail2ban.nix
+++ b/sys/net/fail2ban.nix
@@ -1,6 +1,7 @@
{ lib, config, pkgs, ... }:
with lib; let
cfg = config.local.net.fail2ban;
+ inherit (config.local) nets;
in
{
options.local.net.fail2ban = {
@@ -21,12 +22,12 @@ in
overalljails = true;
};
- #TODO: No quemar
ignoreIP = [
- "10.34.0.0/16"
- "fd34:2::/64"
- "37.205.12.147"
- "2a03:3b40:fe:3ec::1"
+ nets.vpn0.v4.cidr
+ nets.gate0.v4.cidr
+ nets.gate0.v6.cidr
+ nets.gate-public.hosts.gate.v4.address
+ nets.gate-public.hosts.gate.v6.address
];
};
};