[Q&A] How to handle 100+ groups +1 Master?

[PizzaProgram]

I'd like to switch from wireguard + WG-Portal to headscale. At first sight this UI seems to be a good choice, but first I'd like to ask about You all:

What is the recommended way to separate groups but allow 1 Master-group to "see all clients" with this UI?

• A bonus would be if the pizzeria owner could see his own group's PCs, which is online and if not, when did it connected last time?

Thank you very much in forward!

Detailed info:

I need to manage 100+ pizzerias.

100.110.1.0/24 BestPizzaShop-Town1
100.110.2.0/24 PepperoniPizzaShop-Town2
...
100.110.252.0/16 MASTER group << to rule them all ;-)

• Those have each 1-10 windows PC + some iOS/Android phones + some Macs.
• Each device with fixed IPs, no expire.
• Those groups should never be able to reach each other.
• I need a master group to "see them all".
• No connection is allowed to go to the internet through those groups.
• Some groups or devices should be able to reach some services on the server. (SQL, Mqtt, ... )
• Debian 11, amd64 bit, VPS, fix IP, Webmin installed.

Thank You very much for any answers!

[routerino]

ACLs are not implemented in the UI. See this issue as a dependency.

[PizzaProgram]

Thank You for the answer. That's bad news.

I guess manually configuring 100+ ACL rules is nearly impossible by hand / notepad. Is there no other way to separate groups? (Maybe creating 100 users?)

Sorry for my misunderstanding, I'm new to headscale and just consuming all the infos...

[routerino]

closing as stale

[PizzaProgram]

Well, closing the issue sadly does not solve it. :-(

I'm still waiting, if anybody has ANY infos / solutions / ideas?