diff options
| author | Seth Flynn <[email protected]> | 2025-01-31 08:14:23 -0500 |
|---|---|---|
| committer | Seth Flynn <[email protected]> | 2025-02-03 05:34:09 -0500 |
| commit | 082ef6167ea188de4a0439fe63baaca41b19b45b (patch) | |
| tree | c51217b3b47601ee95cacfeaeaef426fb7128a6d /terranix/tailscale/acl.nix | |
| parent | d5ad065e31f4d84824463829eeabfb55dbe9ece4 (diff) | |
terraform: switch to plain hcl
• Removed input 'terranix'
• Removed input 'terranix/bats-assert'
• Removed input 'terranix/bats-support'
• Removed input 'terranix/flake-parts'
• Removed input 'terranix/nixpkgs'
• Removed input 'terranix/systems'
• Removed input 'terranix/terranix-examples'
Diffstat (limited to 'terranix/tailscale/acl.nix')
| -rw-r--r-- | terranix/tailscale/acl.nix | 51 |
1 files changed, 0 insertions, 51 deletions
diff --git a/terranix/tailscale/acl.nix b/terranix/tailscale/acl.nix deleted file mode 100644 index 80e3537..0000000 --- a/terranix/tailscale/acl.nix +++ /dev/null @@ -1,51 +0,0 @@ -{ lib, ... }: -{ - resource.tailscale_acl.default = { - acl = toString ( - builtins.toJSON { - tagOwners = - let - me = [ "getchoo@github" ]; - tags = map (name: "tag:${name}") [ - "server" - "personal" - ]; - in - lib.genAttrs tags (_: me); - - acls = - let - mkAcl = action: src: dst: { inherit action src dst; }; - in - [ - (mkAcl "accept" [ "tag:personal" ] [ "*:*" ]) - (mkAcl "accept" [ "tag:server" ] [ "tag:server:*" ]) - ]; - - ssh = - let - mkSshAcl = action: src: dst: users: { - inherit - action - src - dst - users - ; - }; - in - [ - (mkSshAcl "accept" [ "tag:personal" ] - [ - "tag:server" - "tag:personal" - ] - [ - "autogroup:nonroot" - "root" - ] - ) - ]; - } - ); - }; -} |
