added tailnet devices to fail2ban whitelist

2025-03-04 21:30:45 -06:00 · 2025-03-04 21:30:45 -06:00 · 34bc5b1933
commit 34bc5b1933
parent c2d7f1f481
1 changed files with 4 additions and 0 deletions
--- a/modules/nixos-modules/server/fail2ban.nix
+++ b/modules/nixos-modules/server/fail2ban.nix
@ -20,6 +20,10 @@ in {
          "10.0.0.0/8"
          "172.16.0.0/12"
          "192.168.0.0/16"
+
+          # tail scale tailnet
+          "100.64.0.0/10"
+          "fd7a:115c:a1e0::/48"
        ];
        bantime = "24h"; # Ban IPs for one day on the first ban
        bantime-increment = {