def private_ok

near-architecture@0.9.1.0 · arc.bend:460

import Base

460# ---- where it runs ----
461# On a server, everything is reachable only from the server itself or over the overlay.
462def private_ok(c: Container, +ns: List<&2, Node>) -> Bool:
463  match c:
464    case Container{_, _, _, _, on, +exposure, _, _, _, _, _, _}:
465      Bool.not(is_server(node_role(on, ns))) || is_tailnet(exposure) || is_local(exposure)