diff --git a/roles/vpn/files/config/acl.json b/roles/vpn/files/config/acl.json
index aeafd04..0edf909 100644
--- a/roles/vpn/files/config/acl.json
+++ b/roles/vpn/files/config/acl.json
@@ -2,7 +2,7 @@
   "groups": {
     "group:admin": ["elizabeth.hunt"],
     "group:roomates": ["riley"],
-    "group:friends": ["riley", "rain"],
+    "group:friends": ["riley"],
     "group:sys": ["sys"]
   },
   "tagOwners": {
@@ -23,13 +23,13 @@
     },
     {
       "action": "accept",
-      "src": ["group:sys"],
-      "dst": ["group:sys:*"]
+      "src": ["group:sys", "10.128.0.0/9:*"],
+      "dst": ["group:sys:*", "10.128.0.0/9:*"]
     },
     {
       "action": "accept",
-      "src": ["group:admin"],
-      "dst": ["10.0.0.0/24:*"]
+      "src": ["group:admin", "10.128.0.0/9:*"],
+      "dst": ["10.0.0.0/24:*", "10.128.0.0/9:*"]
     },
     {
       "action": "accept",