new rule and fix domain allowlist

ansible/roles/win_proxy/vars/rules.yml

@@ -2,16 +2,21 @@ squid_acls:
   - name: os_external
     classifier: src
     value: "10.24.0.0/16"
+  - name: agent_dl
+    classifier: dst
+    value: "{{ checkmk_server }}/32"
   - name: allowed_domains
     classifier: dstdomain
-    value: "{{ squid_config_directory }}/{{ squid_allowed_domain_file }}"
+    value: "\"{{ squid_config_directory }}/{{ squid_allowed_domain_file }}\""
 
 squid_rules:
   - acl: to_localhost
     decision: deny
-  - acl: os_external
+  - acl: os_external allowed_domains
     decision: allow
-  - acl: localhost
+  - acl: agent_dl
+    decision: allow
+  - acl: localhost allowed_domains
     decision: allow
   - acl: all
     decision: deny