summaryrefslogtreecommitdiff
path: root/terranix/tailscale/acl.nix
diff options
context:
space:
mode:
Diffstat (limited to 'terranix/tailscale/acl.nix')
-rw-r--r--terranix/tailscale/acl.nix51
1 files changed, 0 insertions, 51 deletions
diff --git a/terranix/tailscale/acl.nix b/terranix/tailscale/acl.nix
deleted file mode 100644
index 80e3537..0000000
--- a/terranix/tailscale/acl.nix
+++ /dev/null
@@ -1,51 +0,0 @@
-{ lib, ... }:
-{
- resource.tailscale_acl.default = {
- acl = toString (
- builtins.toJSON {
- tagOwners =
- let
- me = [ "getchoo@github" ];
- tags = map (name: "tag:${name}") [
- "server"
- "personal"
- ];
- in
- lib.genAttrs tags (_: me);
-
- acls =
- let
- mkAcl = action: src: dst: { inherit action src dst; };
- in
- [
- (mkAcl "accept" [ "tag:personal" ] [ "*:*" ])
- (mkAcl "accept" [ "tag:server" ] [ "tag:server:*" ])
- ];
-
- ssh =
- let
- mkSshAcl = action: src: dst: users: {
- inherit
- action
- src
- dst
- users
- ;
- };
- in
- [
- (mkSshAcl "accept" [ "tag:personal" ]
- [
- "tag:server"
- "tag:personal"
- ]
- [
- "autogroup:nonroot"
- "root"
- ]
- )
- ];
- }
- );
- };
-}