fail2ban test

modules/nixos/hardware/network/default.nix

@@ -27,6 +27,11 @@ in {
         default = {};
         description = "Network interface configurations.";
       };
+      extraHosts = mkOption {
+        type = types.lines;
+        default = "";
+        description = "Extra entries for /etc/hosts.";
+      };
     };
   };
 
@@ -45,6 +50,7 @@ in {
         enable = true;
         inherit (cfg) interfaces;
       };
+      extraHosts = cfg.extraHosts;
     };
 
     systemd.services.NetworkManager = {

modules/nixos/services/agenix/default.nix

@@ -57,7 +57,7 @@ in {
       })
       (mkIf cfg.sobotka.enable {
         secrets = {
-          # Add sobotka specific secrets here
+          cloudflareFirewallApiKey.file = "${self}/secrets/cloudflareFirewallApiKey.age";
         };
       })
       (mkIf cfg.toothpc.enable {