diff options
Diffstat (limited to 'terranix/tailscale')
| -rw-r--r-- | terranix/tailscale/acl.nix | 51 | ||||
| -rw-r--r-- | terranix/tailscale/default.nix | 13 | ||||
| -rw-r--r-- | terranix/tailscale/devices.nix | 20 | ||||
| -rw-r--r-- | terranix/tailscale/dns.nix | 5 | ||||
| -rw-r--r-- | terranix/tailscale/tags.nix | 21 |
5 files changed, 0 insertions, 110 deletions
diff --git a/terranix/tailscale/acl.nix b/terranix/tailscale/acl.nix deleted file mode 100644 index 80e3537..0000000 --- a/terranix/tailscale/acl.nix +++ /dev/null @@ -1,51 +0,0 @@ -{ lib, ... }: -{ - resource.tailscale_acl.default = { - acl = toString ( - builtins.toJSON { - tagOwners = - let - me = [ "getchoo@github" ]; - tags = map (name: "tag:${name}") [ - "server" - "personal" - ]; - in - lib.genAttrs tags (_: me); - - acls = - let - mkAcl = action: src: dst: { inherit action src dst; }; - in - [ - (mkAcl "accept" [ "tag:personal" ] [ "*:*" ]) - (mkAcl "accept" [ "tag:server" ] [ "tag:server:*" ]) - ]; - - ssh = - let - mkSshAcl = action: src: dst: users: { - inherit - action - src - dst - users - ; - }; - in - [ - (mkSshAcl "accept" [ "tag:personal" ] - [ - "tag:server" - "tag:personal" - ] - [ - "autogroup:nonroot" - "root" - ] - ) - ]; - } - ); - }; -} diff --git a/terranix/tailscale/default.nix b/terranix/tailscale/default.nix deleted file mode 100644 index b370b34..0000000 --- a/terranix/tailscale/default.nix +++ /dev/null @@ -1,13 +0,0 @@ -{ lib, ... }: -{ - imports = [ - ./acl.nix - ./devices.nix - ./dns.nix - ./tags.nix - ]; - - provider.tailscale = { - tailnet = lib.tfRef "var.tailnet"; - }; -} diff --git a/terranix/tailscale/devices.nix b/terranix/tailscale/devices.nix deleted file mode 100644 index 625c56e..0000000 --- a/terranix/tailscale/devices.nix +++ /dev/null @@ -1,20 +0,0 @@ -{ lib, ... }: -{ - data.tailscale_device = - let - toDevices = - devices: - lib.genAttrs devices (name: { - name = "${name}.tailc59d6.ts.net"; - wait_for = "60s"; - }); - in - toDevices [ - "atlas" - "caroline" - "glados" - "glados-wsl" - "glados-windows" - "iphone-14" - ]; -} diff --git a/terranix/tailscale/dns.nix b/terranix/tailscale/dns.nix deleted file mode 100644 index 320a24b..0000000 --- a/terranix/tailscale/dns.nix +++ /dev/null @@ -1,5 +0,0 @@ -{ - resource.tailscale_dns_preferences.default = { - magic_dns = true; - }; -} diff --git a/terranix/tailscale/tags.nix b/terranix/tailscale/tags.nix deleted file mode 100644 index 3e82dbb..0000000 --- a/terranix/tailscale/tags.nix +++ /dev/null @@ -1,21 +0,0 @@ -{ lib, ... }: -{ - resource.tailscale_device_tags = - let - getDeviceID = device: lib.tfRef "data.tailscale_device.${device}.id"; - toTags = n: v: { device_id = getDeviceID n; } // v; - - tags = lib.genAttrs [ - "server" - "personal" - ] (n: [ "tag:${n}" ]); - in - builtins.mapAttrs toTags { - atlas.tags = tags.server; - caroline.tags = tags.personal; - glados.tags = tags.personal; - glados-wsl.tags = tags.personal; - glados-windows.tags = tags.personal; - iphone-14.tags = tags.personal; - }; -} |
