changes for admin proxy credentials

ansible/roles/win_proxy/tasks/main.yml

@@ -32,6 +32,26 @@
     state: present
     update_cache: true
 
+- name: Create htpasswd file
+  block:
+    - name: install htpasswd dependancy
+      ansible.builtin.package:
+        name: python3-passlib
+        state: present
+        update_cache: true
+
+    - name: Create htpasswd user
+      community.general.htpasswd:
+        path: /etc/squid/htpasswd
+        create: true
+        state: present
+        name: "{{ proxy_user }}"
+        password: "{{ proxy_user_password }}"
+        owner: "{{ squid_user }}"
+        group: "{{ squid_group }}"
+        mode: 0640
+        hash_scheme: bcrypt
+
 - name: Include variables
   include_vars: rules.yml
 

ansible/roles/win_proxy/templates/squid.conf.j2

@@ -2,6 +2,8 @@
 
 http_port {{ squid_port }}
 
+auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/htpasswd
+
 cache_effective_user {{ squid_user }}
 cache_effective_group {{ squid_group }}
 

ansible/roles/win_proxy/vars/rules.yml

@@ -8,6 +8,9 @@ squid_acls:
   - name: SSL_ports
     classifier: port
     value: 443
+  - name: local
+    classifier: src
+    value: "127.0.0.1/32"
   - name: os_external
     classifier: src
     value: "10.24.0.0/16"
@@ -20,6 +23,9 @@ squid_acls:
   - name: allowed_domains
     classifier: dstdomain
     value: "\"{{ squid_config_directory }}/{{ squid_allowed_domain_file }}\""
+  - name: authenticated_user
+    classifier: proxy_auth
+    value: "REQUIRED"
 
 squid_rules:
   - acl: "!Safe_ports"
@@ -36,5 +42,7 @@ squid_rules:
     decision: allow
   - acl: localhost allowed_domains
     decision: allow
+  - acl: authenticated_user
+    decision: allow
   - acl: all
     decision: deny