enable whitelist for ipv4 ranges

2024-11-28 22:23:04 +08:00 · 2024-11-28 22:23:04 +08:00 · 205f85271b
parent cd7f0eb21d
commit 205f85271b
1 changed files with 18 additions and 0 deletions
--- a/nixos/viridian/services/crowdsec/default.nix
+++ b/nixos/viridian/services/crowdsec/default.nix
@ -95,6 +95,24 @@ in {
    ];
  };

+  environment.etc = {
+    "/crowdsec/parsers/s02-enrich/whitelist.yaml" = {
+      text = ''
+        name: "sajenim/whitelist"
+        description: "Whitelist events from my ipv4 addresses"
+        whitelist:
+          reason: "my ipv4 ranges"
+          ip:
+            - "127.0.0.1"
+          cidr:
+            - "192.168.0.0/16"
+            - "10.0.0.0/8"
+            - "172.16.0.0/12"
+      '';
+      mode = "0755";
+    };
+  };
+
  environment.persistence."/persist" = {
    directories = [
      {