summaryrefslogtreecommitdiff
path: root/roles/vpn
diff options
context:
space:
mode:
authorElizabeth Hunt <elizabeth.hunt@simponic.xyz>2025-01-13 01:42:51 -0500
committerElizabeth Hunt <elizabeth.hunt@simponic.xyz>2025-01-14 00:26:09 -0500
commit47ae33a8c8a724168c0c813a0ea89bae13a60f59 (patch)
tree92f3e82c140c37868d1cfa01b9b7cb64f1e1d6ed /roles/vpn
parentc0ab7feac52fc00e66417db22b25162130a4e6e3 (diff)
downloadoldinfra-47ae33a8c8a724168c0c813a0ea89bae13a60f59.tar.gz
oldinfra-47ae33a8c8a724168c0c813a0ea89bae13a60f59.zip
add zigbee
Diffstat (limited to 'roles/vpn')
-rw-r--r--roles/vpn/files/config/acl.json16
-rw-r--r--roles/vpn/templates/config.yml.j24
2 files changed, 4 insertions, 16 deletions
diff --git a/roles/vpn/files/config/acl.json b/roles/vpn/files/config/acl.json
index 50382f4..9aaf5eb 100644
--- a/roles/vpn/files/config/acl.json
+++ b/roles/vpn/files/config/acl.json
@@ -3,8 +3,6 @@
"group:admin": ["elizabeth"],
"group:roomates": ["riley", "lucina", "elizabeth"],
"group:friends": ["riley", "rain", "lucina"],
- "group:lucina": ["lucina"],
- "group:rain": ["rain"],
"group:sys": ["sys"]
},
"tagOwners": {
@@ -26,12 +24,12 @@
{
"action": "accept",
"src": ["group:sys"],
- "dst": ["group:sys:*", "10.128.0.0/9:*", "group:rain:*"]
+ "dst": ["group:sys:*", "10.128.0.0/9:*"]
},
{
"action": "accept",
"src": ["group:admin"],
- "dst": ["group:admin:*", "10.128.0.0/9:*"]
+ "dst": ["group:admin:*"]
},
{
"action": "accept",
@@ -42,16 +40,6 @@
"action": "accept",
"src": ["group:friends"],
"dst": ["group:sys:*"]
- },
- {
- "action": "accept",
- "src": ["group:rain"],
- "dst": ["group:rain:*"]
- },
- {
- "action": "accept",
- "src": ["group:lucina"],
- "dst": ["group:lucina:*"]
}
]
}
diff --git a/roles/vpn/templates/config.yml.j2 b/roles/vpn/templates/config.yml.j2
index 6450d3e..24a54c8 100644
--- a/roles/vpn/templates/config.yml.j2
+++ b/roles/vpn/templates/config.yml.j2
@@ -209,11 +209,11 @@ dns_config:
mistymountainstherapy.com:
- {{ nameserver_ip }}
lucina.cloud:
- - {{ nameserver_ip }}
+ - 192.168.1.1
ezri.dev:
- {{ nameserver_ip }}
- domains: ['simponic.xyz', 'internal.simponic.xyz']
+ domains: [simponic.xyz', 'internal.simponic.xyz', 'lucina.cloud']
# Extra DNS records
# so far only A-records are supported (on the tailscale side)