Files
headscale/hscontrol/types
Kristoffer Dalby d77ce3582d policy: document CanAccessRoute and filterForNodeLocked design
Add source comments explaining design decisions:

CanAccessRoute (types/node.go): Explain why DestsIsTheInternet is
intentionally absent. Exit routes are handled by RoutesForPeer via
ExitRoutes(), not ACL-based filtering. autogroup:internet is skipped
during filter compilation, so no matchers contain 'the internet'.

Updates #3157
2026-04-04 13:20:45 +00:00
..
2025-02-26 16:22:55 +01:00
2026-02-06 21:45:32 +01:00