summaryrefslogtreecommitdiff
path: root/terranix/tailscale/acl.nix
diff options
context:
space:
mode:
authorSeth Flynn <[email protected]>2025-01-31 08:14:23 -0500
committerSeth Flynn <[email protected]>2025-02-03 05:34:09 -0500
commit082ef6167ea188de4a0439fe63baaca41b19b45b (patch)
treec51217b3b47601ee95cacfeaeaef426fb7128a6d /terranix/tailscale/acl.nix
parentd5ad065e31f4d84824463829eeabfb55dbe9ece4 (diff)
terraform: switch to plain hcl
• Removed input 'terranix' • Removed input 'terranix/bats-assert' • Removed input 'terranix/bats-support' • Removed input 'terranix/flake-parts' • Removed input 'terranix/nixpkgs' • Removed input 'terranix/systems' • Removed input 'terranix/terranix-examples'
Diffstat (limited to 'terranix/tailscale/acl.nix')
-rw-r--r--terranix/tailscale/acl.nix51
1 files changed, 0 insertions, 51 deletions
diff --git a/terranix/tailscale/acl.nix b/terranix/tailscale/acl.nix
deleted file mode 100644
index 80e3537..0000000
--- a/terranix/tailscale/acl.nix
+++ /dev/null
@@ -1,51 +0,0 @@
-{ lib, ... }:
-{
- resource.tailscale_acl.default = {
- acl = toString (
- builtins.toJSON {
- tagOwners =
- let
- me = [ "getchoo@github" ];
- tags = map (name: "tag:${name}") [
- "server"
- "personal"
- ];
- in
- lib.genAttrs tags (_: me);
-
- acls =
- let
- mkAcl = action: src: dst: { inherit action src dst; };
- in
- [
- (mkAcl "accept" [ "tag:personal" ] [ "*:*" ])
- (mkAcl "accept" [ "tag:server" ] [ "tag:server:*" ])
- ];
-
- ssh =
- let
- mkSshAcl = action: src: dst: users: {
- inherit
- action
- src
- dst
- users
- ;
- };
- in
- [
- (mkSshAcl "accept" [ "tag:personal" ]
- [
- "tag:server"
- "tag:personal"
- ]
- [
- "autogroup:nonroot"
- "root"
- ]
- )
- ];
- }
- );
- };
-}