qbit/xin
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

configs/tailnet: clean up quoted stuff a bit

Browse Source
This commit is contained in:
Aaron Bieber 2024-08-24 07:46:10 -06:00
parent b77bf695a2
commit 90d5f340f2
No known key found for this signature in database
1 changed files with 79 additions and 79 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

158
configs/tailnet.nix
View File

@ -61,57 +61,57 @@ let
dst = [ "*:*" ]; dst = [ "*:*" ];
} }
{ {
"action" = "accept"; action = "accept";
"src" = [ "tag:internal-server" "tag:external-server" "tag:work" "tag:laptop" ]; src = [ "tag:internal-server" "tag:external-server" "tag:work" "tag:laptop" ];
"dst" = [ "nbc:443" ]; dst = [ "nbc:443" ];
} }
{ {
"action" = "accept"; action = "accept";
"src" = [ "tag:untrusted" "tag:internal-server" ]; src = [ "tag:untrusted" "tag:internal-server" ];
"dst" = [ "tag:ro-service:443" ]; dst = [ "tag:ro-service:443" ];
} }
{ {
"action" = "accept"; action = "accept";
"src" = [ "tag:work" ]; src = [ "tag:work" ];
"dst" = [ "console:2222" "startpage:443" "rimgo:443" "invidious:443" ]; dst = [ "console:2222" "startpage:443" "rimgo:443" "invidious:443" ];
} }
{ {
"action" = "accept"; action = "accept";
"src" = [ "tag:openbsd" ]; src = [ "tag:openbsd" ];
"dst" = [ "box:443" ]; dst = [ "box:443" ];
} }
{ {
# prometheus # prometheus
"action" = "accept"; action = "accept";
"src" = [ "box" ]; src = [ "box" ];
"dst" = [ "h:9002" "pwntie:9002" ]; dst = [ "h:9002" "pwntie:9002" ];
} }
{ {
# DNS # DNS
"action" = "accept"; action = "accept";
"src" = [ "*" ]; src = [ "*" ];
"dst" = [ "faf:53" ]; dst = [ "faf:53" ];
"proto" = "udp"; proto = "udp";
} }
{ {
# ollama # ollama
"action" = "accept"; action = "accept";
"src" = [ "europa" "h" "tag:work" ]; src = [ "europa" "h" "tag:work" ];
"dst" = [ "ollama:443" ]; dst = [ "ollama:443" ];
"proto" = "tcp"; proto = "tcp";
} }
{ {
# jellyfin for tv # jellyfin for tv
"action" = "accept"; action = "accept";
"src" = [ "tv" "display" ]; src = [ "tv" "display" ];
"dst" = [ "box:443" ]; dst = [ "box:443" ];
"proto" = "tcp"; proto = "tcp";
} }
{ {
"action" = "accept"; action = "accept";
"src" = [ "box" ]; src = [ "box" ];
"dst" = [ "tv:8080" "tv:9090" ]; dst = [ "tv:8080" "tv:9090" ];
"proto" = "tcp"; proto = "tcp";
} }
{ {
action = "accept"; action = "accept";
@ -133,85 +133,85 @@ let
} }
{ {
# RO service can't access things # RO service can't access things
"src" = "tag:ro-service"; src = "tag:ro-service";
"deny" = [ "tag:laptop:443" "tag:mobile:80" "tag:laptop:22" ]; deny = [ "tag:laptop:443" "tag:mobile:80" "tag:laptop:22" ];
} }
{ {
"src" = "tag:external-server"; src = "tag:external-server";
"deny" = [ "tag:laptop:22" ]; deny = [ "tag:laptop:22" ];
} }
{ {
"src" = "tag:laptop"; src = "tag:laptop";
"allow" = [ "tag:ro-service:443" "tag:ro-service:80" "tag:external-server:22" ]; allow = [ "tag:ro-service:443" "tag:ro-service:80" "tag:external-server:22" ];
} }
{ {
"src" = "tag:laptop"; src = "tag:laptop";
"allow" = [ "qbit@tapenet.org:22" ]; allow = [ "qbit@tapenet.org:22" ];
} }
{ {
"src" = "tag:untrusted"; src = "tag:untrusted";
"deny" = [ "tag:laptop:22" ]; deny = [ "tag:laptop:22" ];
"allow" = [ "tag:ro-service:443" ]; allow = [ "tag:ro-service:443" ];
} }
{ {
"src" = "tag:laptop"; src = "tag:laptop";
"allow" = [ "tag:untrusted:22" "tag:untrusted:2222" "tag:work:22" ]; allow = [ "tag:untrusted:22" "tag:untrusted:2222" "tag:work:22" ];
} }
{ {
"src" = "tag:work"; src = "tag:work";
"deny" = [ "tag:laptop:22" ]; deny = [ "tag:laptop:22" ];
} }
# Gitle shouldn't be able to access things, but things should access it # Gitle shouldn't be able to access things, but things should access it
{ {
"src" = "gitle"; src = "gitle";
"deny" = [ "tag:laptop:22" ]; deny = [ "tag:laptop:22" ];
}
{
src = "tag:laptop";
allow = [ "gitle:22" ];
}
{
src = "tag:laptop";
allow = [ "faf:53" ];
}
{
src = "tag:internal-server";
allow = [ "nbc:443" "tag:ro-service:443" ];
} }
{ {
"src" = "tag:laptop"; "src" = "tag:laptop";
"allow" = [ "gitle:22" ]; allow = [ "h:8967" ];
} }
{ {
"src" = "tag:laptop"; src = "h";
"allow" = [ "faf:53" ]; proto = "udp";
allow = [ "faf:53" ];
} }
{ {
"src" = "tag:internal-server"; src = "tag:openbsd";
"allow" = [ "nbc:443" "tag:ro-service:443" ]; proto = "tcp";
allow = [ "box:443" ];
} }
{ {
"src" = "tag:laptop"; src = "sputnik";
"allow" = [ "h:8967" ]; proto = "tcp";
allow = [ "europa:1714" ];
} }
{ {
"src" = "h"; src = "sputnik";
"proto" = "udp"; proto = "udp";
"allow" = [ "faf:53" ]; allow = [ "europa:1714" ];
} }
{ {
"src" = "tag:openbsd"; src = "europa";
"proto" = "tcp"; proto = "tcp";
"allow" = [ "box:443" ]; allow = [ "ollama:443" ];
} }
{ {
"src" = "sputnik"; src = "tv";
"proto" = "tcp"; proto = "tcp";
"allow" = [ "europa:1714" ]; allow = [ "box:443" ];
}
{
"src" = "sputnik";
"proto" = "udp";
"allow" = [ "europa:1714" ];
}
{
"src" = "europa";
"proto" = "tcp";
"allow" = [ "ollama:443" ];
}
{
"src" = "tv";
"proto" = "tcp";
"allow" = [ "box:443" ];
} }
{ {
src = "display"; src = "display";