Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

flatpak-cache: fix httpd not using the squid proxy correctly...

Browse source 
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
This commit is contained in:
Leo Puvilland 2024-03-06 14:39:42 -08:00
parent ccdbdbeeff
commit e05a7b6bb1
No known key found for this signature in database
GPG key ID: 20EA96682F9368EB
2 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
roles/httpd/reverseproxy/templates/reversepassproxy.flatpak-cache.conf
View file

@ -1 +1,12 @@
ProxyRemote "*" "http://worker01.ocp.stg.iad2.fedoraproject.org:31444" ProxyRemote "*" "http://worker01.ocp.stg.iad2.fedoraproject.org:31444"
ProxyRequests On
ProxyVia On
ProxyPreserveHost On
RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Port "443"
ProxyPass / http://worker01.ocp.stg.iad2.fedoraproject.org:31444
ProxyPassReverse / http://worker01.ocp.stg.iad2.fedoraproject.org:31444
RemoteIPHeader X-Forwarded-For

3
roles/openshift-apps/flatpak-cache/templates/squid.conf
View file

@ -1,5 +1,6 @@
acl openqa src 10.3.174.21-10.3.174.64 acl openqa src 10.3.174.21-10.3.174.64
acl batcave src 10.3.163.35 acl batcave src 10.3.163.35
acl proxies src 10.128.4.1
acl SSL_ports port 443 acl SSL_ports port 443
acl Safe_ports port 80 443 acl Safe_ports port 80 443
@ -25,6 +26,8 @@ cache deny !cacheDomain
# And finally deny all other access to this proxy # And finally deny all other access to this proxy
http_access deny all http_access deny all
# Trust proxies to have correct X-Forwarded-For
follow_x_forwarded_for allow proxies
http_port 3128 tcpkeepalive=60,30,3 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=20MB tls-cert=/etc/pki/squid/ca/ca.crt tls-key=/etc/pki/squid/key/ca.key tls-dh=prime256v1:/etc/pki/squid/dhparam/dh.pem http_port 3128 tcpkeepalive=60,30,3 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=20MB tls-cert=/etc/pki/squid/ca/ca.crt tls-key=/etc/pki/squid/key/ca.key tls-dh=prime256v1:/etc/pki/squid/dhparam/dh.pem