From 1beebd485cd0b84d939e36d1969c1dc3b6b65e79 Mon Sep 17 00:00:00 2001
From: sinanmohd <sinan@sinanmohd.com>
Date: Mon, 20 Oct 2025 12:42:58 +0530
Subject: chore(os/kay/headscale): update acl

---
 os/kay/modules/network/headscale.nix | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

(limited to 'os')

diff --git a/os/kay/modules/network/headscale.nix b/os/kay/modules/network/headscale.nix
index 14fcee3..cee386c 100644
--- a/os/kay/modules/network/headscale.nix
+++ b/os/kay/modules/network/headscale.nix
@@ -52,6 +52,11 @@ let
       ];
     };
     acls = [
+      {
+        action = "accept";
+        src = [ "*" ];
+        dst = [ "tag:namescale:${toString config.services.namescale.settings.port}" ];
+      }
       {
         action = "accept";
         src = [ "headplane@" ];
@@ -69,11 +74,10 @@ let
         src = [ "group:bud" ];
         dst = [ "tag:bud_clients:*" ];
       }
-
       {
         action = "accept";
-        src = [ "*" ];
-        dst = [ "tag:namescale:${toString config.services.namescale.settings.port}" ];
+        src = [ "tag:bud_clients" ];
+        dst = [ "tag:bud_clients:80,443" ];
       }
     ];
   };
-- 
cgit v1.2.3