Shared IP ban list — synced to all sami servers

Two files hold the bans:

- static/bans.txt — auto-generated from sources.json URLs (regenerated nightly)

- dynamic/bans.txt — manually-maintained, for IPs you've banned on purpose

To ban an IP or CIDR across all servers, add it to dynamic/bans.txt, commit, push.

The systemd timer on each server pulls every 5 minutes and applies the union.

Format: one CIDR or IP per line. Lines starting with # are ignored.

Example:

# 2026-06-30 — brute-forcing SSH

185.220.101.45

To ban a /24 range: 185.220.101.0/24