🤠
Loading Heady...
🔐

Authentication Required

Please login to access Heady VPN management.

đŸšĢ

Access Denied

Your role does not have permission to access this area.

Your Role:

Required:

Missing Capabilities:

🛡ī¸ Access Control List

Visual editor for the ACL policy that controls which devices and users can reach which hosts. Edits are sent to Headscale via /api/acls.

📖 Tailscale ACL Guide 📚 Headscale ACL Reference
2 rules

Rule #1

Tailscale only supports 'accept' actions (deny by default)

group:admin
*:*

Rule #2

Tailscale only supports 'accept' actions (deny by default)

group:dev
web-servers:80,443
db-servers:5432
Policy JSON Preview
{
  "groups": {
    "group:admin": [
      "admin@example.com",
      "it@example.com"
    ],
    "group:dev": [
      "dev@example.com"
    ]
  },
  "hosts": {
    "db-servers": "100.64.0.10/32",
    "web-servers": "100.64.0.20/32"
  },
  "acls": [
    {
      "action": "accept",
      "src": [
        {
          "type": "group",
          "value": "group:admin"
        }
      ],
      "dst": [
        {
          "type": "any",
          "value": "*",
          "ports": "*"
        }
      ]
    },
    {
      "action": "accept",
      "src": [
        {
          "type": "group",
          "value": "group:dev"
        }
      ],
      "dst": [
        {
          "type": "host",
          "value": "web-servers",
          "ports": "80,443"
        },
        {
          "type": "host",
          "value": "db-servers",
          "ports": "5432"
        }
      ]
    }
  ]
}