feat(teal:headscale): Update ACLs
I've added the rest of the phonetic alphabet, excepting some potentially
confusing names. We also won't be using mispellings in our hostnames, as
we will see them mostly written down
Change-Id: I887f74c1a429aa19fae4c817b0c1c3bef48f8422
Reviewed-on: https://git.clicks.codes/c/Infra/NixFiles/+/750
Tested-by: Skyler Grey <minion@clicks.codes>
Reviewed-by: Samuel Shuert <coded@clicks.codes>
diff --git a/systems/x86_64-linux/teal/default.nix b/systems/x86_64-linux/teal/default.nix
index 7448b92..f7627c5 100644
--- a/systems/x86_64-linux/teal/default.nix
+++ b/systems/x86_64-linux/teal/default.nix
@@ -55,16 +55,35 @@
"pineafan"
];
groups."group:areas" = [
+ # Some phonetic alphabet names are excluded here to avoid confusing
+ # them with given names
"alpha"
"bravo"
- "charlie"
+ "delta"
+ "echo"
+ "foxtrot"
+ "golf"
+ "hotel"
+ "india"
+ "kilo"
+ "lima"
+ "november"
+ "papa"
+ "quebec"
+ "sierra"
+ "tango"
+ "uniform"
+ "whiskey"
+ "xray"
+ "yankee"
+ "zulu"
];
acls = [
{
action = "accept";
src = [ "group:users" ];
- dst = [ "*:*" ];
+ dst = [ "group:users:*" "group:areas:*" ];
}
{
action = "accept";