Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Fix that pdc<->compose entry.

Browse source
This commit is contained in:
Ralph Bean 2016-01-26 13:25:18 +00:00
parent cfc0ede6dd
commit 24091fa80f
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/kojipkgs/files/squid.conf
View file

@ -37,7 +37,8 @@ acl Safe_ports port 80 # http
acl Safe_ports port 443 # https acl Safe_ports port 443 # https
acl CONNECT method CONNECT acl CONNECT method CONNECT
acl our_sites dstdomain kojipkgs.fedoraproject.org acl our_sites dstdomain kojipkgs.fedoraproject.org
acl phx2 src 10.5.125.0/24 10.5.127.0/24 10.5.126.134/32 acl phx2 src 10.5.125.0/24 10.5.127.0/24
acl pdc src 10.5.126.134/32
acl repo_url urlpath_regex -i ^/repo/ acl repo_url urlpath_regex -i ^/repo/
acl kojipkgs urlpath_regex -i \.(rpm|log|sig)$ acl kojipkgs urlpath_regex -i \.(rpm|log|sig)$
acl mash urlpath_regex -i ^/mash/ acl mash urlpath_regex -i ^/mash/
@ -55,6 +56,9 @@ http_access deny repo_url
http_access allow cachemanager localhost http_access allow cachemanager localhost
http_access deny cachemanager http_access deny cachemanager
# Let the pdc-backend inspect the composes
http_access allow pdc compose
# Do not allow non safe ports or connect on anything but ssl ports # Do not allow non safe ports or connect on anything but ssl ports
http_access deny !Safe_ports http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports http_access deny CONNECT !SSL_ports