From fb0b3914086484d9284426985984e2c1699ba557 Mon Sep 17 00:00:00 2001
From: Elizabeth Hunt <elizabeth.hunt@simponic.xyz>
Date: Fri, 5 Jan 2024 16:13:01 -0500
Subject: ldap, internal CA, internal webserver, dns, etc.

---
 roles/vpn/files/config/acl.json | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

(limited to 'roles/vpn/files/config/acl.json')

diff --git a/roles/vpn/files/config/acl.json b/roles/vpn/files/config/acl.json
index 2dbb13a..7c28276 100644
--- a/roles/vpn/files/config/acl.json
+++ b/roles/vpn/files/config/acl.json
@@ -1,6 +1,7 @@
 {
   "groups": {
-    "group:admin": ["elizabeth.hunt"]
+    "group:admin": ["elizabeth.hunt"],
+    "group:sys": ["sys"]
   },
   "tagOwners": {
     "tag:prod": ["group:admin"],
@@ -14,8 +15,14 @@
       "dst": [
         "tag:dev:*",
         "tag:private:*",
-        "tag:prod:*"
+        "tag:prod:*",
+        "group:sys:*"
       ]
+    },
+    {
+      "action": "accept",
+      "src": ["group:sys"],
+      "dst": ["group:sys:*"]
     }
   ]
 }
-- 
cgit v1.2.3-70-g09d2