nixos/monero: add an option to use ip ban-list

This commit is contained in:
nat 2025-05-31 13:02:50 +02:00
parent 6617c167f7
commit 1ffc904284
No known key found for this signature in database

View file

@ -32,6 +32,10 @@ let
restricted-rpc=1
''}
${lib.optionalString (banlist != null) ''
ban-list=${banlist}
''}
limit-rate-up=${toString limits.upload}
limit-rate-down=${toString limits.download}
max-concurrency=${toString limits.threads}
@ -64,6 +68,23 @@ in
'';
};
banlist = lib.mkOption {
type = lib.types.nullOr lib.types.path;
default = null;
description = ''
Path to a text file containing IPs to block.
Useful to prevent DDoS/deanonymization attacks.
https://github.com/monero-project/meta/issues/1124
'';
example = lib.literalExpression ''
builtins.fetchurl {
url = "https://raw.githubusercontent.com/rblaine95/monero-banlist/c6eb9413ddc777e7072d822f49923df0b2a94d88/block.txt";
hash = "";
};
'';
};
mining.enable = lib.mkOption {
type = lib.types.bool;
default = false;