415 lines
8.8 KiB
JSON
415 lines
8.8 KiB
JSON
{
|
|
"groups": {
|
|
"dev-team": {
|
|
"peers": []
|
|
},
|
|
"dev-services": {
|
|
"peers": []
|
|
},
|
|
"fusion": {
|
|
"peers": []
|
|
},
|
|
"test-gs": {
|
|
"peers": []
|
|
},
|
|
"restricted": {
|
|
"peers": []
|
|
}
|
|
},
|
|
"setup_keys": {
|
|
"public-site": {
|
|
"type": "reusable",
|
|
"expires_in": 604800,
|
|
"usage_limit": 0,
|
|
"auto_groups": [
|
|
"dev-services"
|
|
],
|
|
"enrolled": false
|
|
},
|
|
"docs vps": {
|
|
"type": "reusable",
|
|
"expires_in": 604800,
|
|
"usage_limit": 0,
|
|
"auto_groups": [
|
|
"dev-services"
|
|
],
|
|
"enrolled": false
|
|
}
|
|
},
|
|
"policies": {
|
|
"Dev to test gs": {
|
|
"description": "",
|
|
"enabled": true,
|
|
"sources": [
|
|
"dev-team"
|
|
],
|
|
"destinations": [
|
|
"All"
|
|
],
|
|
"bidirectional": false,
|
|
"protocol": "all",
|
|
"action": "accept",
|
|
"source_posture_checks": []
|
|
},
|
|
"Dev Access to Gitea": {
|
|
"description": "",
|
|
"enabled": true,
|
|
"sources": [
|
|
"dev-team"
|
|
],
|
|
"destinations": [
|
|
"dev-services"
|
|
],
|
|
"bidirectional": false,
|
|
"protocol": "all",
|
|
"action": "accept",
|
|
"source_posture_checks": []
|
|
},
|
|
"Fusion Access All": {
|
|
"description": "",
|
|
"enabled": true,
|
|
"sources": [
|
|
"fusion"
|
|
],
|
|
"destinations": [
|
|
"dev-team",
|
|
"test-gs"
|
|
],
|
|
"bidirectional": true,
|
|
"protocol": "all",
|
|
"action": "accept",
|
|
"source_posture_checks": []
|
|
},
|
|
"only fusion": {
|
|
"description": "",
|
|
"enabled": false,
|
|
"sources": [
|
|
"restricted"
|
|
],
|
|
"destinations": [
|
|
"fusion"
|
|
],
|
|
"bidirectional": true,
|
|
"protocol": "all",
|
|
"action": "accept",
|
|
"source_posture_checks": []
|
|
},
|
|
"Ground Stations to Debian Repository": {
|
|
"description": "",
|
|
"enabled": true,
|
|
"sources": [
|
|
"test-gs"
|
|
],
|
|
"destinations": [
|
|
"dev-services"
|
|
],
|
|
"bidirectional": true,
|
|
"protocol": "all",
|
|
"action": "accept",
|
|
"source_posture_checks": []
|
|
},
|
|
"dev services can communicate": {
|
|
"description": "",
|
|
"enabled": true,
|
|
"sources": [
|
|
"dev-services"
|
|
],
|
|
"destinations": [
|
|
"dev-services"
|
|
],
|
|
"bidirectional": true,
|
|
"protocol": "all",
|
|
"action": "accept",
|
|
"source_posture_checks": []
|
|
},
|
|
"Everyone can access docs": {
|
|
"description": "",
|
|
"enabled": true,
|
|
"sources": [
|
|
"All"
|
|
],
|
|
"destinations": [],
|
|
"bidirectional": false,
|
|
"protocol": "all",
|
|
"action": "accept",
|
|
"source_posture_checks": [],
|
|
"destination_resource": {
|
|
"id": "docs.blastpilot.achilles-rnd.cc",
|
|
"type": "domain"
|
|
}
|
|
}
|
|
},
|
|
"posture_checks": {
|
|
"10.112.*.* subnet access": {
|
|
"description": "",
|
|
"checks": {
|
|
"peer_network_range_check": {
|
|
"action": "allow",
|
|
"ranges": [
|
|
"10.112.0.0/16"
|
|
]
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"networks": {
|
|
"Internal Services": {
|
|
"description": "",
|
|
"resources": [
|
|
{
|
|
"name": "docs.blastpilot.achilles-rnd.cc",
|
|
"description": "docs.blastpilot.achilles-rnd.cc",
|
|
"type": "domain",
|
|
"address": "docs.blastpilot.achilles-rnd.cc",
|
|
"enabled": true,
|
|
"groups": [
|
|
"All"
|
|
]
|
|
}
|
|
],
|
|
"routers": [
|
|
{
|
|
"metric": 9999,
|
|
"masquerade": true,
|
|
"enabled": true,
|
|
"peer": "blast-fusion"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"peers": {
|
|
"acarus": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": true,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"blast-fusion": {
|
|
"groups": [
|
|
"fusion"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"blastgs-fpv3": {
|
|
"groups": [
|
|
"test-gs"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"documentation-site": {
|
|
"groups": [
|
|
"dev-services"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"gitea-server": {
|
|
"groups": [
|
|
"dev-services"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"grc-1-3bat": {
|
|
"groups": [
|
|
"test-gs"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"grc-422-vlad.blast.local": {
|
|
"groups": [
|
|
"test-gs"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"ihor-rnd": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"ivan-rnd": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"multik-acer1": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"multik-ptt-test-gs": {
|
|
"groups": [
|
|
"dev-team",
|
|
"fusion",
|
|
"test-gs"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"oleksandr": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": true,
|
|
"inactivity_expiration_enabled": true,
|
|
"ssh_enabled": false
|
|
},
|
|
"prox": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"prox-orangepi": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"prox-pc": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"prox-ubuntu-vm": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"public-website-vps": {
|
|
"groups": [
|
|
"dev-services"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"remote-autel-1-rnd": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"rpitest2": {
|
|
"groups": [
|
|
"test-gs"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"seed-asus1": {
|
|
"groups": [
|
|
"dev-team",
|
|
"fusion"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"seed-linux": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": true,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"seed-macbook1": {
|
|
"groups": [
|
|
"dev-team"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"testovyy-nrk-1-rnd-new-arch": {
|
|
"groups": [
|
|
"test-gs"
|
|
],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
},
|
|
"ubuntu": {
|
|
"groups": [],
|
|
"login_expiration_enabled": false,
|
|
"inactivity_expiration_enabled": false,
|
|
"ssh_enabled": false
|
|
}
|
|
},
|
|
"users": {
|
|
"admin@achilles.local": {
|
|
"name": "admin",
|
|
"role": "owner",
|
|
"auto_groups": []
|
|
},
|
|
"seed@achilles.local": {
|
|
"name": "seed",
|
|
"role": "admin",
|
|
"auto_groups": [
|
|
"dev-team"
|
|
]
|
|
},
|
|
"keltir@achilles.local": {
|
|
"name": "keltir",
|
|
"role": "admin",
|
|
"auto_groups": [
|
|
"dev-team"
|
|
]
|
|
},
|
|
"eugene@achilles.local": {
|
|
"name": "eugene",
|
|
"role": "admin",
|
|
"auto_groups": [
|
|
"dev-team"
|
|
]
|
|
},
|
|
"sava@achilles.local": {
|
|
"name": "sava",
|
|
"role": "admin",
|
|
"auto_groups": [
|
|
"dev-team"
|
|
]
|
|
}
|
|
},
|
|
"routes": {},
|
|
"dns": {
|
|
"nameserver_groups": {}
|
|
}
|
|
}
|