infra/roles/vpn/files/config/acl.json

{
  "groups": {
    "group:admin": ["elizabeth.hunt"],
    "group:sys": ["sys"]
  },
  "tagOwners": {
    "tag:prod": ["group:admin"],
    "tag:private": ["group:admin"],
    "tag:dev": ["group:admin"]
  },
  "acls": [
    {
      "action": "accept",
      "src": ["group:admin"],
      "dst": [
        "tag:dev:*",
        "tag:private:*",
        "tag:prod:*",
        "group:sys:*"
      ]
    },
    {
      "action": "accept",
      "src": ["group:sys"],
      "dst": ["group:sys:*"]
    }
  ]
}