From 7a4f24202179c6800b97afa14e7e86653b1002a4 Mon Sep 17 00:00:00 2001
From: "RingOfStorms (Joshua Bell)" <ringofstorms@gmail.com>
Date: Thu, 13 Mar 2025 11:24:04 -0500
Subject: [PATCH] add fail 2 ban

---
 hosts/oracle/o001/flake.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/hosts/oracle/o001/flake.nix b/hosts/oracle/o001/flake.nix
index 05b3f9c..fb20078 100644
--- a/hosts/oracle/o001/flake.nix
+++ b/hosts/oracle/o001/flake.nix
@@ -66,6 +66,14 @@
                     # NOTE we manually onboard this machine since it has no secrets uploaded to it
                     tailscale.useSecretsAuth = false;
                   };
+
+                  services.fail2ban = {
+                    enable = true;
+                    ignoreIP = [
+                      "100.64.0.0/10"
+                    ];
+                  };
+
                   mods = {
                     common = {
                       disableRemoteBuildsOnLio = true;