diff options
| author | Elizabeth Hunt <me@liz.coffee> | 2025-04-29 18:12:29 -0700 |
|---|---|---|
| committer | Elizabeth Hunt <me@liz.coffee> | 2025-04-29 18:12:29 -0700 |
| commit | 3ddb82656d6d0c34f47962db25d37adf6ebb15e1 (patch) | |
| tree | 154c314d9a01a4a2aff8d41fae182ef7391583b1 /playbooks/roles/outbound/templates | |
| parent | c7c2393bc06c0e49612e9d05e55c30028c02cd4a (diff) | |
| download | infra-3ddb82656d6d0c34f47962db25d37adf6ebb15e1.tar.gz infra-3ddb82656d6d0c34f47962db25d37adf6ebb15e1.zip | |
password manager
Diffstat (limited to 'playbooks/roles/outbound/templates')
| -rw-r--r-- | playbooks/roles/outbound/templates/headscale/config/acl.json | 7 | ||||
| -rw-r--r-- | playbooks/roles/outbound/templates/headscale/config/config.yaml | 5 |
2 files changed, 8 insertions, 4 deletions
diff --git a/playbooks/roles/outbound/templates/headscale/config/acl.json b/playbooks/roles/outbound/templates/headscale/config/acl.json index fe1197a..449207d 100644 --- a/playbooks/roles/outbound/templates/headscale/config/acl.json +++ b/playbooks/roles/outbound/templates/headscale/config/acl.json @@ -1,12 +1,17 @@ { "groups": { - "group:admin": ["liz"] + "group:internal": ["liz{{ oauth_user_suffix }}", "lucina{{ oauth_user_suffix }}", "riley{{ oauth_user_suffix }}"], }, "acls": [ { "action": "accept", "src": ["{{ auth_key_user }}"], "dst": ["{{ auth_key_user }}:*", "10.0.0.0/8:*"] + }, + { + "action": "accept", + "src": ["group:internal"], + "dst": ["10.0.0.0/8:*"] } ] } diff --git a/playbooks/roles/outbound/templates/headscale/config/config.yaml b/playbooks/roles/outbound/templates/headscale/config/config.yaml index 2586848..d3bff5a 100644 --- a/playbooks/roles/outbound/templates/headscale/config/config.yaml +++ b/playbooks/roles/outbound/templates/headscale/config/config.yaml @@ -125,9 +125,8 @@ dns: - {{ headscale_dns_for_connected_clients_1 }} - {{ headscale_dns_for_connected_clients_2 }} split: - {} - # foo.bar.com: - # - 1.1.1.1 + {{ domain }}: + - {{ loadbalancer_ip }} search_domains: [] unix_socket: /var/run/headscale/headscale.sock |