Shared IP ban list — synced to all sami servers
Two files hold the bans:
- static/bans.txt — auto-generated from sources.json URLs (regenerated nightly)
- dynamic/bans.txt — manually-maintained, for IPs you've banned on purpose
To ban an IP or CIDR across all servers, add it to dynamic/bans.txt, commit, push.
The systemd timer on each server pulls every 5 minutes and applies the union.
Format: one CIDR or IP per line. Lines starting with # are ignored.
Example:
# 2026-06-30 — brute-forcing SSH
185.220.101.45
To ban a /24 range: 185.220.101.0/24
sami-bot