summaryrefslogtreecommitdiff
path: root/playbooks/roles/outbound/templates/headscale/config/acl.json
blob: 242d01e2587c429fc18e9fc7bed925093fd668a5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
{
  "groups": {
    "group:coffee_admins": ["liz{{ oauth_user_suffix }}", "lucina{{ oauth_user_suffix }}"],
  },
  "acls": [
{% for user in ["liz", "lucina", "riley"] %}
    {
      "action": "accept",
      "src": ["{{ user }}{{ oauth_user_suffix }}"],
      "dst": ["{{ user }}{{ oauth_user_suffix }}:*"]
    },
{% endfor %}
    {
      "action": "accept",
      "src": ["{{ auth_key_user }}"],
      "dst": ["{{ auth_key_user }}:*", "{{ loadbalancer_ip }}/32:*"]
    },
    {
      "action": "accept",
      "src": ["group:coffee_admins"],
      "dst": ["{{ loadbalancer_ip }}/32:*"]
    }
  ]
}