Tailscale ACL Editor
A modern, user-friendly editor for creating and managing Tailscale Access Control Lists (ACLs). This tool simplifies the process of defining network access policies for your Tailnet without having to manually edit complex JSON structures.
✨ Features
- 🔒 Create and manage ACL rules with an intuitive UI
- 🌐 Support for all Tailscale source and destination types
- 📋 Import existing ACL configurations
- 💾 Export your ACLs as properly formatted JSON
- 🔍 Real-time JSON preview
- ✅ Comprehensive validation for IPs, CIDRs, ports, and more
- 🎨 Clean, responsive dark-themed interface
- 🐳 Docker support for easy deployment
🖥️ Screenshots
More Screenshots coming soon
🚀 Quick Start
Using Docker
# Pull and run the Docker image
docker-compose up -d
# Access the editor at http://localhost:8080
Development Setup
# Clone the repository
git clone https://github.com/yourusername/tailscale-acl-editor.git
cd tailscale-acl-editor
# Install dependencies
npm install
# Start the development server
npm run dev
🛠️ Technology Stack
- Frontend Framework: React with TypeScript
- Build Tool: Vite
- Styling: TailwindCSS
- Icons: Lucide React
- Validation: ip-address, is-cidr libraries
- Deployment: Docker with Nginx
📖 Usage Guide
- Adding Rules: Click "Add Rule" to create a new ACL rule
- Defining Sources: Add users, groups, IPs, or other source types
- Setting Destinations: Specify destination entities and port requirements
- Importing Existing ACLs: Use the "Import ACL" button to load your current configuration
- Exporting: Click "Download" to save your ACL as a JSON file ready for Tailscale
🧩 ACL Structure
The editor supports the full Tailscale ACL structure:
interface ACLPolicy {
acls: ACLRule[];
}
interface ACLRule {
action: 'accept';
src: SourceEntry[];
proto?: Protocol;
dst: DestinationEntry[];
}
🔗 Resources
🤝 Contributing
Contributions are welcome! Please feel free to submit a Pull Request.
📄 License
This project is licensed under the MIT License - see the LICENSE file for details.
🙏 Acknowledgements
- Tailscale for their excellent networking tool and documentation
- All the open-source libraries that made this project possible