adam/windows-ansible
1
0 Fork 0
mirror of https://git.ecdf.ed.ac.uk/win_automation/windows-ansible.git synced 2026-10-26 13:27:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

allow proxy access to chocolatey server

Browse Source
This commit is contained in:
abrown38 committed 2024-09-02 13:19:29 +01:00
1 parent 93022add31
commit 26eaa0187d
2 files changed
+2 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

ansible/roles/win_proxy/vars/rules.yml
+1 -1
View File
@@ -16,7 +16,7 @@ squid_acls:
value: "{{ checkmk_server }}/32"
- name: choco
classifier: dstdomain
value: "{{ win_project }}-choc.{{ win_project }}.loc"
value: "{{ choco_hostname }}"
- name: allowed_domains
classifier: dstdomain
value: "\"{{ squid_config_directory }}/{{ squid_allowed_domain_file }}\""
ansible/vars/protected.yml
+1
View File
@@ -34,6 +34,7 @@ remote_group_rules:
# Chocolatey servers
- { direction: "ingress", protocol: "tcp", port_min: 80, port_max: 80, group: "chocolatey_server", remote_group: "domain_member", comment: "Chocolatey HTTP"}
- { direction: "ingress", protocol: "tcp", port_min: 443, port_max: 443, group: "chocolatey_server", remote_group: "domain_member", comment: "Chocolatey HTTPS"}
- { direction: "ingress", protocol: "tcp", port_min: 80, port_max: 80, group: "chocolatey_server", remote_group: "proxy", comment: "HTTP from proxy"}
# Client egress
- { direction: "egress", protocol: "udp", port_min: 53, port_max: 53, group: "domain_member", remote_group: "domain_controller", comment: "DNS UDP"}