tailnet-policy

Migrate legacy ACLs to Grant syntax and validate huJSON policies.

40|6|Updated Jul 11, 2026

Search Tags:#devops #tailscale #network security #acl #headscale #hujson

Ready to run

npx skills add https://github.com/magnus919/agent-skills --skill tailnet-policy

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: tailnet-policy
Source: https://github.com/magnus919/agent-skills/tree/main/bundles/tailscale/skills/tailnet-policy
Command: npx skills add https://github.com/magnus919/agent-skills --skill tailnet-policy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3, and includes scripts (resource) components.

What problem does it solve?

This skill simplifies the complex task of managing Headscale access control lists by providing a structured environment to author, validate, and migrate huJSON policy files.

Core Features & Use Cases

Policy Migration: Automatically convert legacy ACL syntax to modern, robust Grant-based rules.
Validation & Testing: Run built-in test suites against your policy files to ensure connectivity rules behave as expected before deployment.
Operational Safety: Safely reload Headscale configurations using SIGHUP with automated health verification.

Quick Start

Use the tailnet-policy skill to validate your current policy.hujson file for syntax errors and logic conflicts.

Frequently Asked Questions about tailnet-policy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I migrate legacy Headscale ACLs to modern Grant syntax?▼

To migrate legacy ACLs to modern Grant syntax, this skill automatically converts old Headscale access control rules into robust, Grant-based huJSON policies. This simplifies transitioning to updated policy structures while maintaining network security.

Can I test Headscale huJSON policies for logic conflicts before deploying?▼

Yes, you can test Headscale huJSON policies before deploying. The skill runs built-in test suites against your policy files to validate connectivity rules and ensure ACL behavior functions as expected without breaking network security.

What is the best way to safely reload Headscale configurations after updating ACLs?▼

The best way to safely reload Headscale configurations is by using SIGHUP with automated health verification. This process ensures your updated huJSON access control policies are applied securely without disrupting active tailnet connections.

Do I need Python 3 to manage Headscale access control lists?▼

Yes, you need Python 3 installed to manage Headscale access control lists using this approach. Python is required for executing the underlying scripts that validate policy logic and facilitate ACL migrations.

How do I validate a policy.hujson file for syntax errors?▼

You validate a policy.hujson file for syntax errors by running it through the skill's automated validation environment. This checks your Headscale-compatible access control lists for structural issues and logic conflicts before deployment.