Add tag for access to private services

2024-11-03 14:14:32 +00:00 · 2024-11-03 14:14:32 +00:00 · 77415c6c6e
commit 77415c6c6e
parent cdc351013a
1 changed files with 7 additions and 1 deletions
--- a/ansible/roles/headscale/files/acls.json
+++ b/ansible/roles/headscale/files/acls.json
@ -1,6 +1,7 @@
 {
    "tagOwners": {
-        "tag:client": []
+        "tag:client": [],
+        "tag:private-svcs": []

    },
    "acls": [
@ -8,6 +9,11 @@
            "action": "accept",
            "src": ["tag:client"],
            "dst": ["*:*"]
+        },
+        {
+            "action": "accept",
+            "src": ["tag:private-svcs"],
+            "dst": ["{{ vps_hosts.private_ipv6_marker }}:80,443"]
        }
    ]
 }