feat: add acl policies to the headscale

2026-02-01 01:14:58 +01:00
parent d25d213d9b
commit 3ee0b96ed5
2 changed files with 27 additions and 0 deletions
@@ -9,6 +9,7 @@ services:
    volumes:
      - ./config/headscale.yaml:/etc/headscale/config.yaml
      - data:/var/lib/headscale
      - ./config/policy.json:/var/lib/headscale/policy.json
    labels:
      - "me.tale.headplane.target: headscale"
      - "traefik.enable=true"
@@ -0,0 +1,26 @@
 {
    "groups": {
        "group:admin": [
            "admin@"
        ],
        "group:users": []
    },
    "tagOwners": {},
    "hosts": {},
    "acls": [
        {
            "#ha-meta": {
                "name": "users",
                "open": true
            },
            "action": "accept",
            "src": [
                "autogroup:member"
            ],
            "dst": [
                "autogroup:self:*"
            ]
        }
    ],
    "ssh": []
 }