squid_acls:
  - name: os_external
    classifier: src
    value: "10.24.0.0/16"
  - name: allowed_domains
    classifier: dstdomain
    value: "{{ squid_config_directory }}/{{ squid_allowed_domain_file }}"

squid_rules:
  - acl: to_localhost
    decision: deny
  - acl: os_external
    decision: allow
  - acl: localhost
    decision: allow
  - acl: all
    decision: deny