Post

The boundaries section is the part to copy: a dedicated tag for the Codex nodes, and ACLs that let that tag reach only the two or three dev services it needs, nothing else on the tailnet.