···

       
9
       
9
       
 
       
  };

     

       
10
       
10
       
 
       
in

     

       
11
       
11
       
 
       
{

     

       
12
       
12
       
-
       
  networking.firewall.extraCommands = builtins.concatStringsSep "\n" ([

     

       
13
       
13
       
-
       
    # i'd be damned if they rename the helper, but i also cba writing it *again*, for the same util to show up

     

       
14
       
14
       
-
       
    # 3 times in the final script.

     

       
15
       
15
       
-
       
    "ip46tables -N gensokyo-blackhole"

     

       
16
       
16
       
-
       
    "ip46tables -I INPUT -j gensokyo-blackhole"

     

       
17
       
17
       
-
       
  ] ++

     

       
18
       
18
       
-
       
    lib.flatten (

     

       
12
       
12
       
+
       
  networking.firewall.extraCommands = builtins.concatStringsSep "\n" (

     

       
13
       
13
       
+
       
    [

     

       
14
       
14
       
+
       
      # i'd be damned if they rename the helper, but i also cba writing it *again*, for the same util to show up

     

       
15
       
15
       
+
       
      # 3 times in the final script.

     

       
16
       
16
       
+
       
      "ip46tables -N gensokyo-blackhole"

     

       
17
       
17
       
+
       
      "ip46tables -I INPUT -j gensokyo-blackhole"

     

       
18
       
18
       
+
       
    ]

     

       
19
       
19
       
+
       
    ++ lib.flatten (

     

       
19
       
20
       
 
       
      lib.mapAttrsToList (

     

       
20
       
21
       
 
       
        family: ips: builtins.map (ip: "${family}tables -w -I gensokyo-blackhole -s ${ip} -j DROP") ips

     

       
21
       
22
       
 
       
      ) banned

     

···

       
1
       
1
       
-
       
{_utils, ...}: {

     

       
1
       
1
       
+
       
{ _utils, ... }:

     

       
2
       
2
       
+
       
{

     

       
2
       
3
       
 
       
  services.nginx.virtualHosts."users.soopy.moe" = _utils.mkVhost {

     

       
3
       
4
       
 
       
    locations."/" = _utils.mkNginxFile {

     

       
4
       
5
       
 
       
      content = ''