diff --git a/modules/fail2ban/default.nix b/modules/fail2ban/default.nix
index 182c46d..3b80851 100644
--- a/modules/fail2ban/default.nix
+++ b/modules/fail2ban/default.nix
@@ -1,3 +1,4 @@
+{ config, hosts, ... }:
 {
   services.fail2ban = {
     enable = true;
@@ -6,5 +7,9 @@
       port = 22
       mode = aggressive
     '';
+    ignoreIP = [
+      "10.0.0.0/8"
+      hosts.${config.networking.hostName}.interfaces.primary.addr
+    ];
   };
 }