ad workstation isolation

This commit is contained in:
Damien Coles 2026-02-10 10:58:21 -05:00
parent 91eae53605
commit 4aab95f01e

View File

@ -158,7 +158,8 @@ VMs only accept traffic from the Proxmox host (for Ansible) and the Nebula overl
|-------|---------|
| `admin` | Full access (your devices) |
| `infrastructure` | Core services |
| `ad` | Windows AD domain machines |
| `ad` | Windows AD core services (DCs, CA) |
| `workstations` | Domain-joined user machines (can only reach DCs) |
| `projects` | Application workloads |
| `games` | Isolated game servers |