SELinux module to allow Caddy to connect with tailscaled's socket for automatic TLS

caddy-autotls-tailscaled.te

module caddy-autotls-tailscaled 1.0;

require {
        type var_run_t;
        type httpd_t;
        type unconfined_service_t;
        class sock_file write;
        class unix_stream_socket connectto;
}

#============= httpd_t ==============
allow httpd_t var_run_t:sock_file write;
allow httpd_t unconfined_service_t:unix_stream_socket connectto;