From 26eaa0187d793d9f53f4681b2010efbad1b87366 Mon Sep 17 00:00:00 2001 From: abrown38 Date: Tue, 27 Aug 2024 10:55:47 +0100 Subject: [PATCH] allow proxy access to chocolatey server --- ansible/roles/win_proxy/vars/rules.yml | 2 +- ansible/vars/protected.yml | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/ansible/roles/win_proxy/vars/rules.yml b/ansible/roles/win_proxy/vars/rules.yml index 2eb5578..0997cc4 100644 --- a/ansible/roles/win_proxy/vars/rules.yml +++ b/ansible/roles/win_proxy/vars/rules.yml @@ -16,7 +16,7 @@ squid_acls: value: "{{ checkmk_server }}/32" - name: choco classifier: dstdomain - value: "{{ win_project }}-choc.{{ win_project }}.loc" + value: "{{ choco_hostname }}" - name: allowed_domains classifier: dstdomain value: "\"{{ squid_config_directory }}/{{ squid_allowed_domain_file }}\"" diff --git a/ansible/vars/protected.yml b/ansible/vars/protected.yml index 68793dd..14f8091 100644 --- a/ansible/vars/protected.yml +++ b/ansible/vars/protected.yml @@ -34,6 +34,7 @@ remote_group_rules: # Chocolatey servers - { direction: "ingress", protocol: "tcp", port_min: 80, port_max: 80, group: "chocolatey_server", remote_group: "domain_member", comment: "Chocolatey HTTP"} - { direction: "ingress", protocol: "tcp", port_min: 443, port_max: 443, group: "chocolatey_server", remote_group: "domain_member", comment: "Chocolatey HTTPS"} + - { direction: "ingress", protocol: "tcp", port_min: 80, port_max: 80, group: "chocolatey_server", remote_group: "proxy", comment: "HTTP from proxy"} # Client egress - { direction: "egress", protocol: "udp", port_min: 53, port_max: 53, group: "domain_member", remote_group: "domain_controller", comment: "DNS UDP"}