From 109114703b42ba17c8f2a4a347bd4a9ecd1e82d5 Mon Sep 17 00:00:00 2001
From: seth <getchoo@tuta.io>
Date: Wed, 13 Dec 2023 15:13:33 -0500
Subject: tofu: use imported resources

---
 tofu/tailscale/acl.nix | 42 ++++++++++++++++++++----------------------
 1 file changed, 20 insertions(+), 22 deletions(-)

(limited to 'tofu/tailscale/acl.nix')

diff --git a/tofu/tailscale/acl.nix b/tofu/tailscale/acl.nix
index 46503d8..d27d3e1 100644
--- a/tofu/tailscale/acl.nix
+++ b/tofu/tailscale/acl.nix
@@ -1,27 +1,25 @@
 {lib, ...}: {
-  resource = {
-    tailscale_acl.main = {
-      acl = toString (builtins.toJSON {
-        tagOwners = let
-          me = ["getchoo@github"];
-          tags = map (name: "tag:${name}") ["server" "personal" "gha"];
-        in
-          lib.genAttrs tags (_: me);
+  resource.tailscale_acl.default = {
+    acl = toString (builtins.toJSON {
+      tagOwners = let
+        me = ["getchoo@github"];
+        tags = map (name: "tag:${name}") ["server" "personal" "gha"];
+      in
+        lib.genAttrs tags (_: me);
 
-        acls = let
-          mkAcl = action: src: dst: {inherit action src dst;};
-        in [
-          (mkAcl "accept" ["tag:personal"] ["*:*"])
-          (mkAcl "accept" ["tag:server" "tag:gha"] ["tag:server:*"])
-        ];
+      acls = let
+        mkAcl = action: src: dst: {inherit action src dst;};
+      in [
+        (mkAcl "accept" ["tag:personal"] ["*:*"])
+        (mkAcl "accept" ["tag:server" "tag:gha"] ["tag:server:*"])
+      ];
 
-        ssh = let
-          mkSshAcl = action: src: dst: users: {inherit action src dst users;};
-        in [
-          (mkSshAcl "accept" ["tag:personal"] ["tag:server" "tag:personal"] ["autogroup:nonroot" "root"])
-          (mkSshAcl "accept" ["tag:gha"] ["tag:server"] ["root"])
-        ];
-      });
-    };
+      ssh = let
+        mkSshAcl = action: src: dst: users: {inherit action src dst users;};
+      in [
+        (mkSshAcl "accept" ["tag:personal"] ["tag:server" "tag:personal"] ["autogroup:nonroot" "root"])
+        (mkSshAcl "accept" ["tag:gha"] ["tag:server"] ["root"])
+      ];
+    });
   };
 }
-- 
cgit v1.2.3