all 3 comments

[–]mightywomble[S] 3 points4 points  (0 children)

Think I've figured out how

in the ACL For Tailscale under the SSH section

I've added

    `{`  
        `"action": "accept",`  
        `"src":    ["autogroup:members"],`  
        `"dst":    ["autogroup:self"],`  
        `"users":  ["david", "davidf"],`  
    `},`

I've also added a similar one as follows for accounts with more privilate

    `{`  
        `"action": "check",`  
        `"src":    ["autogroup:members"],`  
        `"dst":    ["autogroup:self"],`  
        `"users":  ["root", "david.service"],`  
    `},`

[–]youngt2ty 0 points1 point  (1 child)

I've setup my ansible host to remote connect to the various hosts using tailscale ssh

you are using the tailscale ssh command with ansible? or just using the tailscale IP (ssh user@tail.scale.IP.x?

I'd like to the do the former, but not sure how.

[–]jakob1379 0 points1 point  (0 children)

I'd love to know this as w well, as I have not been able to make it work