package model

import "time"

// IPListEntry is a single CIDR/IP entry in the host-wide allow or block
// list. These are not scoped to a single WireGuard server - they apply to
// the whole host, evaluated before any per-server firewall rules (see
// firewall.GlobalTableName / firewall.GenerateGlobalRuleset).
type IPListEntry struct {
	ID        string    `json:"id"`
	ListType  string    `json:"list_type"` // "allow" or "block"
	CIDR      string    `json:"cidr"`
	Comment   string    `json:"comment"`
	CreatedAt time.Time `json:"created_at"`
}