mirror of
https://github.com/juanfont/headscale.git
synced 2026-08-07 15:58:45 +09:00
b01e67e8e5
CanAccess now treats a node's advertised subnet routes as part of its source identity, so an ACL granting the subnet-owner as source lets traffic from the subnet through. Matches SaaS semantics. Updates #3157