ACL Documentation error #578

Closed
opened 2025-12-29 02:20:43 +01:00 by adam · 1 comment
Owner

Originally created by @nathan-march on GitHub (Nov 15, 2023).

On this page: https://headscale.net/acls/#acl-setup

The very bottom provides these examples:

    // We still have to allow internal users communications since nothing guarantees that each user have
    // their own users.
    { "action": "accept", "src": ["boss"], "dst": ["boss:*"] },
    { "action": "accept", "src": ["dev1"], "dst": ["dev1:*"] },
    { "action": "accept", "src": ["dev2"], "dst": ["dev2:*"] },
    { "action": "accept", "src": ["admin1"], "dst": ["admin1:*"] },
    { "action": "accept", "src": ["intern1"], "dst": ["intern1:*"] }

This doesn't work. The correct syntax has group: in front, for example:

    { "action": "accept", "src": ["group:boss"], "dst": ["group:boss:*"] },
Originally created by @nathan-march on GitHub (Nov 15, 2023). On this page: https://headscale.net/acls/#acl-setup The very bottom provides these examples: ``` // We still have to allow internal users communications since nothing guarantees that each user have // their own users. { "action": "accept", "src": ["boss"], "dst": ["boss:*"] }, { "action": "accept", "src": ["dev1"], "dst": ["dev1:*"] }, { "action": "accept", "src": ["dev2"], "dst": ["dev2:*"] }, { "action": "accept", "src": ["admin1"], "dst": ["admin1:*"] }, { "action": "accept", "src": ["intern1"], "dst": ["intern1:*"] } ``` This doesn't work. The correct syntax has group: in front, for example: ``` { "action": "accept", "src": ["group:boss"], "dst": ["group:boss:*"] }, ```
adam added the bug label 2025-12-29 02:20:43 +01:00
adam closed this issue 2025-12-29 02:20:43 +01:00
Author
Owner

@Sh4d commented on GitHub (Nov 20, 2023):

I misinterpreted the docs, this is actually correct according to the tailscale acl docs.

@Sh4d commented on GitHub (Nov 20, 2023): I misinterpreted the docs, this is actually correct according to the tailscale acl docs.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#578