From b62d5f559b81556a1dd6197c72a0c43ba1744477 Mon Sep 17 00:00:00 2001
From: Elizabeth Hunt <elizabeth.hunt@simponic.xyz>
Date: Thu, 4 Jan 2024 02:14:29 -0500
Subject: add acl in json

---
 roles/vpn/files/config/acl.json | 21 +++++++++++++++++++++
 roles/vpn/files/config/acl.yml  |  4 ----
 2 files changed, 21 insertions(+), 4 deletions(-)
 create mode 100644 roles/vpn/files/config/acl.json
 delete mode 100644 roles/vpn/files/config/acl.yml

(limited to 'roles/vpn/files')

diff --git a/roles/vpn/files/config/acl.json b/roles/vpn/files/config/acl.json
new file mode 100644
index 0000000..2dbb13a
--- /dev/null
+++ b/roles/vpn/files/config/acl.json
@@ -0,0 +1,21 @@
+{
+  "groups": {
+    "group:admin": ["elizabeth.hunt"]
+  },
+  "tagOwners": {
+    "tag:prod": ["group:admin"],
+    "tag:private": ["group:admin"],
+    "tag:dev": ["group:admin"]
+  },
+  "acls": [
+    {
+      "action": "accept",
+      "src": ["group:admin"],
+      "dst": [
+        "tag:dev:*",
+        "tag:private:*",
+        "tag:prod:*"
+      ]
+    }
+  ]
+}
diff --git a/roles/vpn/files/config/acl.yml b/roles/vpn/files/config/acl.yml
deleted file mode 100644
index c00cf48..0000000
--- a/roles/vpn/files/config/acl.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-groups:
-  admin:
-    - "lizzy"
-- 
cgit v1.2.3-70-g09d2