Local changes

config/host-config/limina.nix

@@ -36,13 +36,8 @@ in {
       };
 
       # FIXME: this should be automatic
-      firewall.trustedInterfaces = [
-        "intif0"
-        "intif1"
-        "intif2"
-        "lo"
-        "docker0"
-      ];
+      firewall.trustedInterfaces =
+        [ "intif0" "intif1" "intif2" "lo" "docker0" ];
 
       nat = {
         enable = true;
@@ -53,7 +48,7 @@ in {
 
     fudo = {
       hosts.limina.external-interfaces = [ "enp1s0" ];
-      
+
       local-network = {
         enable = true;
         domain = domain-name;

config/profile-config/common.nix

@@ -55,10 +55,13 @@ in {
       '';
     };
 
-    fail2ban = {
-      enable = config.networking.firewall.enable;
-      bantime-increment.enable = true;
-    };
+    fail2ban =
+      let domain-name = config.fudo.hosts.${config.instance.hostname}.domain;
+      in {
+        enable = config.networking.firewall.enable;
+        bantime-increment.enable = true;
+        ignoreIP = config.fudo.domains.${domain-name}.local-networks;
+      };
 
     xserver = {
       layout = "us";

config/sites.nix

@@ -21,6 +21,7 @@
           speed-factor = 2;
         };
       };
+      enable-distributed-builds = true;
       # FIXME: good idea?
       # network-mounts = {
       #   "/mnt/documents" = {