Compare commits

..

No commits in common. "5bba4c651f526173633fb4e359b5aa1e1a081e33" and "ec0c627d139806e84564d2aa51e39dc6c240baa1" have entirely different histories.

View File

@ -23,6 +23,7 @@
// Hidden serves
{"action": "accept", "src": ["*"], "dst": ["tag:Hidden:*"]},
],
// Define postures that will be applied to all rules without any specific
@ -51,10 +52,12 @@
// Define users and devices that can use Tailscale SSH.
"ssh": [
// Allow all users to SSH into their own devices in check mode.
// Comment this section out if you want to define specific restrictions.
{
"action": "accept",
"src": ["tag:Random"],
"dst": ["tag:Host", "tag:Service"],
"dst": ["autogroup:taged"],
"users": ["autogroup:nonroot", "root"],
},
],
@ -63,7 +66,7 @@
"tests": [
{
"src": "tag:Bridge",
"accept": ["tag:Hidden:80"],
"accept": ["tag:Random:80"],
"deny": ["tag:Host:80"],
},
{
@ -72,3 +75,4 @@
},
],
}