summaryrefslogtreecommitdiff
path: root/os
diff options
context:
space:
mode:
authorsinanmohd <sinan@sinanmohd.com>2025-10-20 12:42:58 +0530
committersinanmohd <sinan@sinanmohd.com>2025-10-20 12:42:58 +0530
commit1beebd485cd0b84d939e36d1969c1dc3b6b65e79 (patch)
tree8e3eee7b8dc57699ded187a8d5aa6f591d74d3cc /os
parentb1231221fdf865cfc6f1b0586785a4a1e9981dd0 (diff)
chore(os/kay/headscale): update acl
Diffstat (limited to 'os')
-rw-r--r--os/kay/modules/network/headscale.nix10
1 files changed, 7 insertions, 3 deletions
diff --git a/os/kay/modules/network/headscale.nix b/os/kay/modules/network/headscale.nix
index 14fcee3..cee386c 100644
--- a/os/kay/modules/network/headscale.nix
+++ b/os/kay/modules/network/headscale.nix
@@ -54,6 +54,11 @@ let
acls = [
{
action = "accept";
+ src = [ "*" ];
+ dst = [ "tag:namescale:${toString config.services.namescale.settings.port}" ];
+ }
+ {
+ action = "accept";
src = [ "headplane@" ];
dst = [ "*:*" ];
}
@@ -69,11 +74,10 @@ let
src = [ "group:bud" ];
dst = [ "tag:bud_clients:*" ];
}
-
{
action = "accept";
- src = [ "*" ];
- dst = [ "tag:namescale:${toString config.services.namescale.settings.port}" ];
+ src = [ "tag:bud_clients" ];
+ dst = [ "tag:bud_clients:80,443" ];
}
];
};