nebula: add to fail2ban.ignoreIP

diff --git a/share/nebula/sourcephile.fr.nix b/share/nebula/sourcephile.fr.nix
index af7c84fc76ab28363aababff3693b10cf387e4b3..a7c7f4992bdfac534d7f95cec623451d4823d1cb 100644 (file)
--- a/share/nebula/sourcephile.fr.nix
+++ b/share/nebula/sourcephile.fr.nix
@@ -3,6 +3,7 @@ let
   domain = "sourcephile.fr";
   port = toString config.services.nebula.networks.${domain}.listen.port;
   iface = config.services.nebula.networks.${domain}.tun.device;
+  IPv4Prefix = "10.0.0";
 in
 {
   environment.systemPackages = with pkgs; [ nebula ];
@@ -11,13 +12,13 @@ in
   ];
   install.target = lib.mkDefault "\"\${NIXOS_TARGET:-root@${config.networking.hostName}.sp}\"";
   networking.hosts = {
-    "10.0.0.1" = [ "mermet.sp" ];
-    "10.0.0.2" = [ "losurdo.sp" ];
-    "10.0.0.3" = [ "oignon.sp" ];
-    "10.0.0.4" = [ "patate.sp" ];
-    "10.0.0.5" = [ "carotte.sp" ];
-    "10.0.0.6" = [ "aubergine.sp" ];
-    "10.0.0.7" = [ "courge.sp" ];
+    "${IPv4Prefix}.1" = [ "mermet.sp" ];
+    "${IPv4Prefix}.2" = [ "losurdo.sp" ];
+    "${IPv4Prefix}.3" = [ "oignon.sp" ];
+    "${IPv4Prefix}.4" = [ "patate.sp" ];
+    "${IPv4Prefix}.5" = [ "carotte.sp" ];
+    "${IPv4Prefix}.6" = [ "aubergine.sp" ];
+    "${IPv4Prefix}.7" = [ "courge.sp" ];
   };
   services.nebula.networks.${domain} = {
     enable = true;
@@ -27,15 +28,15 @@ in
     listen.host = lib.mkDefault "0.0.0.0";
     tun.device = lib.mkDefault "neb-sourcephile";
     staticHostMap = {
-      "10.0.0.1" = [ "mermet.${domain}:10001" ];
-      "10.0.0.2" = [ "losurdo.${domain}:10002" ];
+      "${IPv4Prefix}.1" = [ "mermet.${domain}:10001" ];
+      "${IPv4Prefix}.2" = [ "losurdo.${domain}:10002" ];
     };
     lighthouses = [
-      "10.0.0.1"
-      "10.0.0.2"
+      "${IPv4Prefix}.1"
+      "${IPv4Prefix}.2"
     ];
     relays = [
-      "10.0.0.1"
+      "${IPv4Prefix}.1"
     ];
     firewall = {
       inbound = [
@@ -107,4 +108,9 @@ in
     }
   '';
   networking.networkmanager.unmanaged = [ iface ];
+  services.fail2ban.ignoreIP = [
+    "${IPv4Prefix}.1" # mermet.sp
+    "${IPv4Prefix}.2" # losurdo.sp
+    "${IPv4Prefix}.3" # oignon.sp
+  ];
 }