# Shared IP ban list — synced to all sami servers
#
# Two files hold the bans:
#   - static/bans.txt   — auto-generated from sources.json URLs (regenerated nightly)
#   - dynamic/bans.txt  — manually-maintained, for IPs you've banned on purpose
#
# To ban an IP or CIDR across all servers, add it to dynamic/bans.txt, commit, push.
# The systemd timer on each server pulls every 5 minutes and applies the union.
#
# Format: one CIDR or IP per line. Lines starting with # are ignored.
# Example:
#   # 2026-06-30 — brute-forcing SSH
#   185.220.101.45
#
# To ban a /24 range: 185.220.101.0/24