modules/fail2ban: ignore own and internal IPs
This commit is contained in:
parent
5f13c5eb49
commit
7b290253e1
1 changed files with 5 additions and 0 deletions
|
@ -1,3 +1,4 @@
|
||||||
|
{ config, hosts, ... }:
|
||||||
{
|
{
|
||||||
services.fail2ban = {
|
services.fail2ban = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
@ -6,5 +7,9 @@
|
||||||
port = 22
|
port = 22
|
||||||
mode = aggressive
|
mode = aggressive
|
||||||
'';
|
'';
|
||||||
|
ignoreIP = [
|
||||||
|
"10.0.0.0/8"
|
||||||
|
hosts.${config.networking.hostName}.interfaces.primary.addr
|
||||||
|
];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue