diff --git a/roles/kojipkgs/files/squid.conf b/roles/kojipkgs/files/squid.conf index 942cfe78e5..22fc0e3d5d 100644 --- a/roles/kojipkgs/files/squid.conf +++ b/roles/kojipkgs/files/squid.conf @@ -37,7 +37,8 @@ acl Safe_ports port 80 # http acl Safe_ports port 443 # https acl CONNECT method CONNECT acl our_sites dstdomain kojipkgs.fedoraproject.org -acl phx2 src 10.5.125.0/24 10.5.127.0/24 10.5.126.134/32 +acl phx2 src 10.5.125.0/24 10.5.127.0/24 +acl pdc src 10.5.126.134/32 acl repo_url urlpath_regex -i ^/repo/ acl kojipkgs urlpath_regex -i \.(rpm|log|sig)$ acl mash urlpath_regex -i ^/mash/ @@ -55,6 +56,9 @@ http_access deny repo_url http_access allow cachemanager localhost http_access deny cachemanager +# Let the pdc-backend inspect the composes +http_access allow pdc compose + # Do not allow non safe ports or connect on anything but ssl ports http_access deny !Safe_ports http_access deny CONNECT !SSL_ports