31 lines
686 B
Nix
31 lines
686 B
Nix
|
# This file defines a Nix helper function to create Tailscale ACL files.
|
||
|
|
#
|
||
|
|
# https://tailscale.com/kb/1018/install-acls
|
||
|
|
|
||
|
|
{ depot, ... }:
|
||
|
|
|
||
|
|
with depot.nix.yants;
|
||
|
|
|
||
|
|
let
|
||
|
|
inherit (builtins) toFile toJSON;
|
||
|
|
|
||
|
|
acl = struct "acl" {
|
||
|
|
Action = enum [ "accept" "reject" ];
|
||
|
|
Users = list string;
|
||
|
|
Ports = list string;
|
||
|
|
};
|
||
|
|
|
||
|
|
acls = list entry;
|
||
|
|
|
||
|
|
aclConfig = struct "aclConfig" {
|
||
|
|
# Static group mappings from group names to lists of users
|
||
|
|
Groups = option (attrs (list string));
|
||
|
|
|
||
|
|
# Hostname aliases to use in place of IPs
|
||
|
|
Hosts = option (attrs string);
|
||
|
|
|
||
|
|
# Actual ACL entries
|
||
|
|
ACLs = list acl;
|
||
|
|
};
|
||
|
|
in config: toFile "tailscale-acl.json" (toJSON (aclConfig config))
|