Whitelist the public_ips of every inventory host in crowdsec and keep a LAPI allowlist equal to the whitelist

2026-10-08 09:19:51 +00:00
parent d345ccf585
commit fd73949412
4 changed files with 48 additions and 3 deletions
@@ -1,9 +1,9 @@
 # {{ ansible_managed }}
 name: local/host-whitelist
-description: Internal ranges and admin addresses
+description: Internal ranges and the public addresses of all hosts
 whitelist:
  reason: internal or admin source
  cidr:
-{% for cidr in crowdsec.whitelist | dict2items | rejectattr('value', 'none') | map(attribute='value') | unique %}
+{% for cidr in crowdsec_whitelist %}
    - "{{ cidr }}"
 {% endfor %}