ip blocklist by clanker

This commit is contained in:
Kopatz
2026-03-14 23:13:10 +01:00
parent d9246f76e6
commit 1180c1b65f
4 changed files with 196 additions and 17 deletions

View File

@@ -20,6 +20,7 @@
../../modules/services/ddclient-cloudflare.nix
../../modules/services/grafana.nix
../../modules/services/coturn.nix
../../modules/services/blocklist.nix
./disk-config.nix
./mail.nix
(modulesPath + "/installer/scan/not-detected.nix")
@@ -183,25 +184,9 @@
1234 #kop-audio default port
#9987 # teamspeak6 voice port
];
networking.nftables.tables.ip_drop = {
family = "inet";
content = ''
set blocked-ip4 {
typeof ip saddr
flags interval
auto-merge
elements = { 45.144.212.240 }
}
chain input {
# -100 priority to run before the default filter input chain (0)
type filter hook input priority -100; policy accept;
ip saddr @blocked-ip4 log prefix "nftables drop: " level info counter drop
}
'';
};
networking.hostName = "server-vm"; # Define your hostname.
#containers.privnetwork = {
# autoStart = true;
# privateNetwork = true;