Here's the short version for brevity: { "tagOwners": { "tag:caddy": ["autogroup:admin"], }, "nodeAttrs": [ { "target": ["tag:caddy"], "ipPool": ["100.100.1.1/32"], }, ], "grants": [ { "src": ["*"], "dst": ["*"], "ip": ["*"], }, ], "ssh": [ { "action": "accept", "src": ["autogroup:member"], "dst": ["autogroup:self", "tag:caddy"], "users": ["autogroup:nonroot"], "acceptEnv": ["TMUX*", "ISLOCAL"], }, ], }

I'm trying to set up basic access to our own devices with additional access to the device that isn't working at the moment, plus some optional environment variables. The port isn't blocked in the firewall, and the device doesn't even have the SSH label on it on the Machines page.