summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--group_vars/vpn.yml1
-rw-r--r--roles/vpn/files/config/acl.json7
2 files changed, 5 insertions, 3 deletions
diff --git a/group_vars/vpn.yml b/group_vars/vpn.yml
index 40a5003..be91bca 100644
--- a/group_vars/vpn.yml
+++ b/group_vars/vpn.yml
@@ -4,3 +4,4 @@ headscale_allowed_users:
- "elizabeth@simponic.xyz"
- "riley@simponic.xyz"
- "rain@simponic.xyz"
+ - "lucina@simponic.xyz"
diff --git a/roles/vpn/files/config/acl.json b/roles/vpn/files/config/acl.json
index e92eb74..c33dc49 100644
--- a/roles/vpn/files/config/acl.json
+++ b/roles/vpn/files/config/acl.json
@@ -1,9 +1,10 @@
{
"groups": {
"group:admin": ["elizabeth"],
- "group:roomates": ["riley"],
+ "group:roomates": ["riley", "lucina"],
"group:friends": ["riley", "rain"],
"group:rain": ["rain"],
+ "group:lucina": ["lucina"],
"group:sys": ["sys"]
},
"tagOwners": {
@@ -25,7 +26,7 @@
{
"action": "accept",
"src": ["group:sys"],
- "dst": ["group:sys:*", "10.128.0.0/9:*", "group:rain:*"]
+ "dst": ["group:sys:*", "10.128.0.0/9:*", "group:rain:*", "192.168.1.0/24:*", "group:lucina:*"]
},
{
"action": "accept",
@@ -35,7 +36,7 @@
{
"action": "accept",
"src": ["group:roomates"],
- "dst": ["10.0.0.0/8:*"]
+ "dst": ["10.0.0.0/8:*", "192.168.86.0/24:*", "192.168.1.0/24:*"]
},
{
"action": "accept",