alexktz/tailscale
alexktz/tailscale
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions
Manages Tailscale ACLs via GitOps.
22 commits 3 branches 0 tags 96 KiB
  • Python 100%
Find a file
Exact
Alex Kretzschmar 89f94167dd
All checks were successful
Tailscale policy / validate (push) Successful in 12s
Details
Allow Alex to deploy container workloads over Tailscale SSH
2026-10-19 20:14:14 -04:00
.forgejo/workflows Use stock Go runtime and cache the upstream policy client 2026-09-14 22:01:05 -04:00
scripts Use stock Go runtime and cache the upstream policy client 2026-09-14 22:01:05 -04:00
tests Use stock Go runtime and cache the upstream policy client 2026-09-14 22:01:05 -04:00
.gitignore Use stock Go runtime and cache the upstream policy client 2026-09-14 22:01:05 -04:00
policy.hujson Allow Alex to deploy container workloads over Tailscale SSH 2026-10-19 20:14:14 -04:00
README.md Trim README to everyday policy workflow 2026-09-14 22:10:52 -04:00

README.md

Tailscale policy

Edit policy.hujson and its access tests. Branches and same-repository PRs run validation; merging to main applies the policy automatically.

Local checks

python3 -m unittest discover -s tests -v

For live validation, install Go and Python and set the read-only TS_TAILNET, TS_OAUTH_ID and TS_OAUTH_SECRET credentials:

python3 scripts/policy.py prepare
python3 scripts/policy.py test

CI and recovery

The workflow uses the infra runner, a stock Go image and a cached official gitops-pusher. It lists the required secrets. There are no custom image builds.

Deployment rejects console drift and outdated commits. Revert a policy commit to roll back. If someone edited the live policy manually, reconcile it with Git before deploying again.