2 files changed, 21 insertions, 4 deletions
diff --git a/roles/vpn/files/config/acl.json b/roles/vpn/files/config/acl.json
new file mode 100644
index 0000000..2dbb13a
--- /dev/null
+++ b/roles/vpn/files/config/acl.json
@@ -0,0 +1,21 @@
+{
+  "groups": {
+    "group:admin": ["elizabeth.hunt"]
+  },
+  "tagOwners": {
+    "tag:prod": ["group:admin"],
+    "tag:private": ["group:admin"],
+    "tag:dev": ["group:admin"]
+  },
+  "acls": [
+    {
+      "action": "accept",
+      "src": ["group:admin"],
+      "dst": [
+        "tag:dev:*",
+        "tag:private:*",
+        "tag:prod:*"
+      ]
+    }
+  ]
+}
diff --git a/roles/vpn/files/config/acl.yml b/roles/vpn/files/config/acl.yml
deleted file mode 100644
index c00cf48..0000000
--- a/roles/vpn/files/config/acl.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-groups:
-  admin:
-    - "lizzy"