motiejus/config
1
Fork 0
Code Packages Releases Activity

headscale: rm acls

Browse Source
This commit is contained in:
Motiejus Jakštys
2026-01-15 20:44:19 +02:00
parent ad4e34beaa
commit dcbba6fe69
2 changed files with 1 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
modules/services/headscale/acl-policy.json
View File

@@ -1,37 +0,0 @@
{
"groups": {
"group:admin": ["motiejus@", "servers@"]
},
"tagOwners": {
"tag:public-server": ["servers@"]
},
"acls": [
{
"action": "accept",
"src": ["group:admin"],
"dst": ["*:*"]
},
{
"action": "accept",
"src": ["*"],
"dst": ["tag:public-server:*"]
},
{
"action": "accept",
"src": ["*"],
"proto": "tcp",
"dst": ["*:22"]
},
{
"action": "accept",
"src": ["*"],
"proto": "icmp",
"dst": ["*:*"]
}
]
}

2
modules/services/headscale/default.nix
View File

@@ -29,7 +29,7 @@
prefixes.v4 = config.mj.services.headscale.subnetCIDR; prefixes.v4 = config.mj.services.headscale.subnetCIDR;
#log.level = "debug"; #log.level = "debug";
log.level = "info"; log.level = "info";
policy.path = ./acl-policy.json; #policy.path = ./acl-policy.json;
dns = { dns = {
nameservers.global = [ nameservers.global = [
"1.1.1.1" "1.1.1.1"