modules/fail2ban: ignore own and internal IPs

This commit is contained in:
Max Headroom 2022-05-16 19:21:31 +02:00
parent 5f13c5eb49
commit 7b290253e1

View file

@ -1,3 +1,4 @@
{ config, hosts, ... }:
{
services.fail2ban = {
enable = true;
@ -6,5 +7,9 @@
port = 22
mode = aggressive
'';
ignoreIP = [
"10.0.0.0/8"
hosts.${config.networking.hostName}.interfaces.primary.addr
];
};
}