systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 12 Activity Actions

Add tag for access to private services
All checks were successful
/ terraform (push) Successful in 1m0s
Details
/ ansible (push) Successful in 1m33s
Details

Browse source
This commit is contained in:
Jake Howard 2024-11-03 14:14:32 +00:00
parent cdc351013a
commit 77415c6c6e
Signed by: jake
GPG key ID: 57AFB45680EDD477
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
ansible/roles/headscale/files/acls.json
View file

@ -1,6 +1,7 @@
{ {
"tagOwners": { "tagOwners": {
"tag:client": [] "tag:client": [],
"tag:private-svcs": []
}, },
"acls": [ "acls": [
@ -8,6 +9,11 @@
"action": "accept", "action": "accept",
"src": ["tag:client"], "src": ["tag:client"],
"dst": ["*:*"] "dst": ["*:*"]
},
{
"action": "accept",
"src": ["tag:private-svcs"],
"dst": ["{{ vps_hosts.private_ipv6_marker }}:80,443"]
} }
] ]
} }