ACL_example#2

{
	"groups": {
		"group:external_users_#1": [
			"tailscale_friend1@example.com",
			"tailscale_friend2@example.com",
			"tailscale_friend3@example.com",
			"tailscale_friend@privaterelay.appleid.com",
			"example@example.com",
		],
	},
	"acls": [
		// Allow external users to access Jellyfin.
		{
			"action": "accept",
			"src":    ["group:external_users_#1"],
			"dst":    ["*:8096"],
		},

		// Allow tailscale_friend1@example.com access to Calibre_Reader.
		{
			"action": "accept",
			"src":    ["tailscale_friend1@example.com"],
			"dst":    ["*:8123"],
		},
		
		// Allow example@example.com access to Flame, transmission, Calibre_Server_Manager, Calibre_Reader, Firefox_webtop and RustDesk_Direct_IP.
		{
			"action": "accept",
			"src":    ["example@example.com"],
			"dst":    ["*:5005", "*:9091", "*:8123", "*:8124", "*:3000", "*:21114-21116"],
		},

		// Allow the owner full unrestricted access.
		{
			"action": "accept",
			"src":    ["tailscale_account_host@example.com"],
			"dst":    ["*:*"]
		},
	],
	"nodeAttrs": [
		{
			"target": ["autogroup:member"],
			"attr":   ["funnel"],
		},
	],
}