godot/Tail-Firewall
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: godot:5bba4c651f526173633fb4e359b5aa1e1a081e33
Branches Tags
godot:main
..
compare: godot:ec0c627d139806e84564d2aa51e39dc6c240baa1
Branches Tags
godot:main

No commits in common. "5bba4c651f526173633fb4e359b5aa1e1a081e33" and "ec0c627d139806e84564d2aa51e39dc6c240baa1" have entirely different histories.
5bba4c651f ... ec0c627d13

1 changed files with 15 additions and 11 deletions
Show Stats Expand all files Collapse all files

22
my-rules.json
View File

@ -23,6 +23,7 @@
// Hidden serves // Hidden serves
{"action": "accept", "src": ["*"], "dst": ["tag:Hidden:*"]}, {"action": "accept", "src": ["*"], "dst": ["tag:Hidden:*"]},
], ],
// Define postures that will be applied to all rules without any specific // Define postures that will be applied to all rules without any specific
@ -51,24 +52,27 @@
// Define users and devices that can use Tailscale SSH. // Define users and devices that can use Tailscale SSH.
"ssh": [ "ssh": [
// Allow all users to SSH into their own devices in check mode.
// Comment this section out if you want to define specific restrictions.
{ {
"action": "accept", "action": "accept",
"src": ["tag:Random"], "src": ["tag:Random"],
"dst": ["tag:Host", "tag:Service"], "dst": ["autogroup:taged"],
"users": ["autogroup:nonroot", "root"], "users": ["autogroup:nonroot", "root"],
}, },
], ],
// Test access rules every time they're saved. // Test access rules every time they're saved.
"tests": [ "tests": [
{
"src": "tag:Bridge",
"accept": ["tag:Random:80"],
"deny": ["tag:Host:80"],
},
{ {
"src": "tag:Bridge", "src": "tag:Random",
"accept": ["tag:Hidden:80"],
"deny": ["tag:Host:80"],
},
{
"src": "tag:Random",
"accept": ["tag:Bridge:80", "tag:Host:80"], "accept": ["tag:Bridge:80", "tag:Host:80"],
}, },
], ],
} }