add fail 2 ban

2025-03-13 11:24:04 -05:00 · 2025-03-13 11:24:04 -05:00 · 7a4f242021
commit 7a4f242021
parent c8a9fa024b
1 changed files with 8 additions and 0 deletions
--- a/hosts/oracle/o001/flake.nix
+++ b/hosts/oracle/o001/flake.nix
@ -66,6 +66,14 @@
                    # NOTE we manually onboard this machine since it has no secrets uploaded to it
                    tailscale.useSecretsAuth = false;
                  };
+
+                  services.fail2ban = {
+                    enable = true;
+                    ignoreIP = [
+                      "100.64.0.0/10"
+                    ];
+                  };
+
                  mods = {
                    common = {
                      disableRemoteBuildsOnLio = true;