godot/Tail-Firewall
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: godot:5bba4c651f526173633fb4e359b5aa1e1a081e33
Branches Tags
godot:main
..
compare: godot:ec0c627d139806e84564d2aa51e39dc6c240baa1
Branches Tags
godot:main

No commits in common. "5bba4c651f526173633fb4e359b5aa1e1a081e33" and "ec0c627d139806e84564d2aa51e39dc6c240baa1" have entirely different histories.
5bba4c651f ... ec0c627d13

1 changed files with 15 additions and 11 deletions
Show Stats Expand all files Collapse all files

8
my-rules.json
View File

@ -23,6 +23,7 @@
// Hidden serves // Hidden serves
{"action": "accept", "src": ["*"], "dst": ["tag:Hidden:*"]}, {"action": "accept", "src": ["*"], "dst": ["tag:Hidden:*"]},
], ],
// Define postures that will be applied to all rules without any specific // Define postures that will be applied to all rules without any specific
@ -51,10 +52,12 @@
// Define users and devices that can use Tailscale SSH. // Define users and devices that can use Tailscale SSH.
"ssh": [ "ssh": [
// Allow all users to SSH into their own devices in check mode.
// Comment this section out if you want to define specific restrictions.
{ {
"action": "accept", "action": "accept",
"src": ["tag:Random"], "src": ["tag:Random"],
"dst": ["tag:Host", "tag:Service"], "dst": ["autogroup:taged"],
"users": ["autogroup:nonroot", "root"], "users": ["autogroup:nonroot", "root"],
}, },
], ],
@ -63,7 +66,7 @@
"tests": [ "tests": [
{ {
"src": "tag:Bridge", "src": "tag:Bridge",
"accept": ["tag:Hidden:80"], "accept": ["tag:Random:80"],
"deny": ["tag:Host:80"], "deny": ["tag:Host:80"],
}, },
{ {
@ -72,3 +75,4 @@
}, },
], ],
} }