diff --git a/modules/hardening.nix b/modules/hardening.nix
index 9233354..fa7058f 100644
--- a/modules/hardening.nix
+++ b/modules/hardening.nix
@@ -35,6 +35,10 @@
       enable = true;
       maxtime = "24h";
     };
+    ignoreIP = [
+      "100.64.0.0/10"
+      "127.0.0.0/8"
+    ];
   };
 
   # ── Kernel hardening ──