update tailscale acl

azuline · Dec 19, 2023 · 045779e · 045779e
1 parent d096d0c
commit 045779e
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 2 deletions.
diff --git a/home/default.nix b/home/default.nix
@@ -23,6 +23,7 @@
       curl
       dasel
       decrypt-zen
+      decrypt-frieren
       dnsutils
       exiftool
       fd

diff --git a/pkgs/decrypt-frieren/default.nix b/pkgs/decrypt-frieren/default.nix
@@ -0,0 +1,16 @@
+{ writeShellScriptBin }:
+
+writeShellScriptBin "decrypt-frieren" ''
+  #!/usr/bin/env bash
+
+  printf "waiting for stage 1 to become available.."
+  while ! timeout 2 ping -c 1 -n 147.135.10.32 &> /dev/null
+  do
+      printf "%c" "."
+  done
+
+  echo
+  echo "-----"
+  echo "stage 1 available, ssh-ing to decrypt"
+  ssh root@147.135.10.32 -p 2222
+''
diff --git a/pkgs/default.nix b/pkgs/default.nix
@@ -10,6 +10,7 @@ import nixpkgs {
         bar-now-playing = prev.callPackage ./bar-now-playing { };
         bar-loadavg = prev.callPackage ./bar-loadavg { };
         bar-vpn = prev.callPackage ./bar-vpn { };
+        decrypt-frieren = prev.callPackage ./decrypt-frieren { };
         decrypt-zen = prev.callPackage ./decrypt-zen { };
         devenv = devenv.packages.${system}.devenv;
         discord = prev.callPackage ./discord { inherit srcs; original = prev.discord; };

diff --git a/tailscale.policy.json b/tailscale.policy.json
@@ -1,7 +1,7 @@
 {
   "hosts": {
     "splendor": "100.109.183.108",
-    "zen": "100.71.28.44"
+    "frieren": "100.84.146.55"
   },
   "groups": {
     "group:admins": ["azuline@github"]
@@ -15,7 +15,7 @@
     {
       "action": "accept",
       "src": ["tag:ci"],
-      "dst": ["zen:4646"]
+      "dst": ["frieren:4646"]
     }
   ],
   "ssh": [