supabase-postgres.git / summary / log / commit / refs

commit    7d030d6c65eee6a06a23c046b1d1e511b0ce2ef9
Author:   Tom Ashley <tom.ashley@gmail.com>
Commit:   GitHub <noreply@github.com>
Date:     Mon Jun 08 15:36:08 2026 +0000

    chore: [sec-813] Ignore CF warp ranges from being banned (#2171)


 ansible/files/fail2ban_config/jail.local | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/ansible/files/fail2ban_config/jail.local b/ansible/files/fail2ban_config/jail.local
index 44e8210f..d7962904 100644
--- a/ansible/files/fail2ban_config/jail.local
+++ b/ansible/files/fail2ban_config/jail.local
@@ -2,3 +2,30 @@
 
 banaction = nftables-multiport
 banaction_allports = nftables-allports
+
+# ignore loopback local host and Cloudflare Supabase IP range
+ignoreip = 127.0.0.1/8 ::1
+           104.30.172.213/32
+           104.30.172.214/32
+           104.30.172.215/32
+           104.30.172.216/32
+           104.30.172.217/32
+           104.30.172.218/32
+           104.30.172.220/32
+           104.30.179.65/32
+           104.30.179.66/32
+           104.30.179.67/32
+           104.30.179.68/32
+           104.30.179.69/32
+           2a09:bac0:1000:150c::/64
+           2a09:bac0:1000:150d::/64
+           2a09:bac0:1000:150e::/64
+           2a09:bac0:1000:150f::/64
+           2a09:bac0:1000:1510::/64
+           2a09:bac0:1000:1511::/64
+           2a09:bac0:1000:1512::/64
+           2a09:bac0:1000:1513::/64
+           2a09:bac0:1001:60a::/64
+           2a09:bac0:1001:60b::/64
+           2a09:bac0:1001:60c::/64
+           2a09:bac0:1001:60d::/64