modules/fail2ban: ignore own and internal IPs
This commit is contained in:
parent
5f13c5eb49
commit
7b290253e1
1 changed files with 5 additions and 0 deletions
|
@ -1,3 +1,4 @@
|
|||
{ config, hosts, ... }:
|
||||
{
|
||||
services.fail2ban = {
|
||||
enable = true;
|
||||
|
@ -6,5 +7,9 @@
|
|||
port = 22
|
||||
mode = aggressive
|
||||
'';
|
||||
ignoreIP = [
|
||||
"10.0.0.0/8"
|
||||
hosts.${config.networking.hostName}.interfaces.primary.addr
|
||||
];
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue