feat: add acl policies to the headscale

2026-02-01 01:14:58 +01:00
parent d25d213d9b
commit 3ee0b96ed5
2 changed files with 27 additions and 0 deletions
@@ -9,6 +9,7 @@ services:
    volumes:
      - ./config/headscale.yaml:/etc/headscale/config.yaml
      - data:/var/lib/headscale
+      - ./config/policy.json:/var/lib/headscale/policy.json
    labels:
      - "me.tale.headplane.target: headscale"
      - "traefik.enable=true"
@@ -0,0 +1,26 @@
+{
+    "groups": {
+        "group:admin": [
+            "admin@"
+        ],
+        "group:users": []
+    },
+    "tagOwners": {},
+    "hosts": {},
+    "acls": [
+        {
+            "#ha-meta": {
+                "name": "users",
+                "open": true
+            },
+            "action": "accept",
+            "src": [
+                "autogroup:member"
+            ],
+            "dst": [
+                "autogroup:self:*"
+            ]
+        }
+    ],
+    "ssh": []
+}