From df1a4fef2bcf20a3b54f2fc1b4c8220d663d04cd Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Tue, 11 Feb 2020 16:36:28 +0000 Subject: feat(nix/tailscale): Add function for generating tailscale ACLs ... and use it on Camden! --- ops/nixos/camden/default.nix | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) (limited to 'ops/nixos') diff --git a/ops/nixos/camden/default.nix b/ops/nixos/camden/default.nix index d1d601ecb000..ccb580a15899 100644 --- a/ops/nixos/camden/default.nix +++ b/ops/nixos/camden/default.nix @@ -100,8 +100,15 @@ in pkgs.lib.fix(self: { services.tailscale = { enable = true; relayConf = "/etc/tailscale.conf"; - aclFile = null; # allow all traffic for testing package = pkgs.third_party.tailscale; + aclFile = pkgs.nix.tailscale [ + # Allow any traffic from myself + { + Action = "accept"; + Users = [ "mail@tazj.in" ]; + Ports = [ "*:*" ]; + } + ]; }; system.stateVersion = "19.09"; -- cgit 1.4.1