# /etc/blocklist-sync.conf (sample)
API_URL='https://firewall.mycupcake.ba/blocklist/api.php?token=REPLACE_WITH_NUMERIC_TOKEN'
STATE_DIR="/var/lib/blocklist-sync"
NFT_TABLE="inet blocklist"
NFT_SET_V4="blocked_ipv4"
NFT_SET_V6="blocked_ipv6"
LOG_TAG="blocklist-sync"

# RDNS (PTR) matching
RDNS_ENABLE=true
RDNS_PATTERNS_URL='https://firewall.mycupcake.ba/blocklist/api.php?token=REPLACE_WITH_NUMERIC_TOKEN&fmt=patterns'
RDNS_SCAN_SOCKETS=true
RDNS_SCAN_LOGS=true
LOG_PATHS="/var/log/nginx/access.log /var/log/apache2/access.log"
LOG_TAIL_LINES=200
RDNS_MAX_LOOKUPS=200
RDNS_DNS_CMD="dig -x %IP% +short"
RDNS_TIMEOUT=1
RDNS_AUTO_REPORT=true
RDNS_REPORT_URL='https://firewall.mycupcake.ba/blocklist/report.php?token=REPLACE_WITH_NUMERIC_TOKEN'
