summaryrefslogtreecommitdiff
path: root/tf/tailscale/acl.nix
diff options
context:
space:
mode:
authorseth <[email protected]>2023-12-27 04:49:26 -0500
committerseth <[email protected]>2023-12-27 05:09:07 -0500
commit773d59f2606c924de218d8d5bdfadcc875084047 (patch)
tree10bd52f58715adb47dcf87993885d2b3989d85c5 /tf/tailscale/acl.nix
parent6f2a3fc6e3e20e719a4d570d883d64023db00653 (diff)
terranix: better handle deployments
Diffstat (limited to 'tf/tailscale/acl.nix')
-rw-r--r--tf/tailscale/acl.nix25
1 files changed, 0 insertions, 25 deletions
diff --git a/tf/tailscale/acl.nix b/tf/tailscale/acl.nix
deleted file mode 100644
index d27d3e1..0000000
--- a/tf/tailscale/acl.nix
+++ /dev/null
@@ -1,25 +0,0 @@
-{lib, ...}: {
- resource.tailscale_acl.default = {
- acl = toString (builtins.toJSON {
- tagOwners = let
- me = ["getchoo@github"];
- tags = map (name: "tag:${name}") ["server" "personal" "gha"];
- in
- lib.genAttrs tags (_: me);
-
- acls = let
- mkAcl = action: src: dst: {inherit action src dst;};
- in [
- (mkAcl "accept" ["tag:personal"] ["*:*"])
- (mkAcl "accept" ["tag:server" "tag:gha"] ["tag:server:*"])
- ];
-
- ssh = let
- mkSshAcl = action: src: dst: users: {inherit action src dst users;};
- in [
- (mkSshAcl "accept" ["tag:personal"] ["tag:server" "tag:personal"] ["autogroup:nonroot" "root"])
- (mkSshAcl "accept" ["tag:gha"] ["tag:server"] ["root"])
- ];
- });
- };
-}