---
# Same sources as the crowdsec role (roles/crowdsec/vars/main.yml), plus loopback.
crowdsec_range_bouncer_allow: >-
  {{ (crowdsec.whitelist | default({}) | dict2items | rejectattr('value', 'none') | map(attribute='value') | list
  + groups['all'] | map('extract', hostvars, 'public_ips') | select('defined') | flatten
  + ['127.0.0.0/8', '::1/128']) | unique }}