trixie/roles/lmn_localproxy/templates/squid-usermode.conf.j2

acl local-servers dstdomain .{{ domain }}
cache_peer {{ localproxy_parent }} parent 3128 0 no-query default login=NEGOTIATE auth-no-keytab
never_direct deny local-servers
never_direct allow all
#access_log stdio:/tmp/access.log squid
access_log none
cache_log /dev/null
logfile_rotate 0
pid_filename none
{% if vm_support %}
http_port 192.168.122.1:3128
{% endif %}
http_port 127.0.0.1:3128
http_access allow all
Implement VM configuration and deploy the images. 2023-01-31 21:18:24 +01:00			`acl local-servers dstdomain .{{ domain }}`
Create own role for the usersquid http_proxy functionality 2025-03-31 18:13:50 +02:00			`cache_peer {{ localproxy_parent }} parent 3128 0 no-query default login=NEGOTIATE auth-no-keytab`
Implement VM configuration and deploy the images. 2023-01-31 21:18:24 +01:00			`never_direct deny local-servers`
Enable firewall activation for exam-mode For working exam-mode we need to block direct internet access by firewall. Users have to use squid-proxy on firewall, which can be disabled for exam-users. To allow VM-traffic (anonymous user), we use a local squid server with users kerberos-ticket to authenticate on the parent squid. When using VMs on teacherdevices offsite, the local squid has to use direct internet access. So we need two squid configs. When switching between offsite and onsite, the squid has to be restartet with corresponding config. 2024-12-11 13:09:30 +01:00			`never_direct allow all`
Implement VM configuration and deploy the images. 2023-01-31 21:18:24 +01:00			`#access_log stdio:/tmp/access.log squid`
			`access_log none`
fqdn for parent proxy 2023-06-26 18:33:56 +02:00			`cache_log /dev/null`
Implement VM configuration and deploy the images. 2023-01-31 21:18:24 +01:00			`logfile_rotate 0`
leftover pid file from other user prevents squid from starting 2023-11-07 08:23:47 +01:00			`pid_filename none`
Fix: Add newline in squid config 2025-04-02 14:01:34 +02:00			`{% if vm_support %}`
			`http_port 192.168.122.1:3128`
			`{% endif %}`
Start user-squid-proxy at login so that all programs without kerberos support have proxy access 2025-01-09 12:31:24 +01:00			`http_port 127.0.0.1:3128`
Implement VM configuration and deploy the images. 2023-01-31 21:18:24 +01:00			`http_access allow all`