ip_blocker.env.example

# Assignments are consumed by another script when this file is sourced.
# shellcheck disable=SC2034

# Copy to ip_blocker.env beside the script and set mode 0600.
# Country selection is intentionally required: choose the policy for this host.
# Each provider can have its own country list; results are combined.
IP_BLOCKER_COUNTRIES='ripe:IT,FR;ipdeny:US,CA;nirsoft:DE'

# Used only by the simple form, for example IP_BLOCKER_COUNTRIES='US,CA'.
# Advanced provider:country syntax ignores this setting.
IP_BLOCKER_PROVIDER=ipdeny
IP_BLOCKER_SSH_PORT=22

# Space-separated interface patterns. Quote values containing wildcards/spaces.
IP_BLOCKER_FLOWTABLE_INTERFACES='en* wlan* docker* br-*'
IP_BLOCKER_NAT_INTERFACES='eth* en*'

IP_BLOCKER_USE_BLOCKLIST=false
IP_BLOCKER_GEOBLOCK_IPV6=false

# Keep these generic defaults, or set the existing names during a migration.
IP_BLOCKER_NFT_TABLE_NAME=ip_blocker
IP_BLOCKER_IPTABLES_CHAIN_PREFIX=IPBLOCKER

# Optional paths and early-boot network tuning.
# IP_BLOCKER_LIST_DIR=/absolute/path/to/lists
# IP_BLOCKER_LOCK_DIR=/run/ip_blocker.lock
# IP_BLOCKER_CONNECTIVITY_CHECK_SITES='github.com google.com'
# IP_BLOCKER_CONNECTIVITY_MAX_WAIT=120
# IP_BLOCKER_CONNECTIVITY_RETRY_INTERVAL=10
# IP_BLOCKER_MAX_RETRIES=3
# DNS_SERVERS='9.9.9.9 1.1.1.1'