Write an ACL config for Tailscale that has three groups in it

nill
family
servers


Everything that is included in the nill group has access to all servers of all three groups on all ports, what is included in the family group has the ability only to use any servers from any groups as exit-nodes, but does not have access to any services on the network servers, the servers group has access to 22/tcp, 80/tcp, 443/tcp to all servers of all three groups, and on other ports and protocols has no access