add lucina

group_vars/vpn.yml

@@ -4,3 +4,4 @@ headscale_allowed_users:
   - "elizabeth@simponic.xyz"
   - "riley@simponic.xyz"
   - "rain@simponic.xyz"
+  - "lucina@simponic.xyz"

roles/vpn/files/config/acl.json

@@ -1,9 +1,10 @@
 {
   "groups": {
     "group:admin": ["elizabeth"],
-    "group:roomates": ["riley"],
+    "group:roomates": ["riley", "lucina"],
     "group:friends": ["riley", "rain"],
     "group:rain": ["rain"],
+    "group:lucina": ["lucina"],
     "group:sys": ["sys"]
   },
   "tagOwners": {
@@ -25,7 +26,7 @@
     {
       "action": "accept",
       "src": ["group:sys"],
-      "dst": ["group:sys:*", "10.128.0.0/9:*", "group:rain:*"]
+      "dst": ["group:sys:*", "10.128.0.0/9:*", "group:rain:*", "192.168.1.0/24:*", "group:lucina:*"]
     },
     {
       "action": "accept",
@@ -35,7 +36,7 @@
     {
       "action": "accept",
       "src": ["group:roomates"],
-      "dst": ["10.0.0.0/8:*"]
+      "dst": ["10.0.0.0/8:*", "192.168.86.0/24:*", "192.168.1.0/24:*"]
     },
     {
       "action": "accept",