Ajour Squid
This commit is contained in:
parent
f5ef84cf91
commit
e07bb64897
30
Squid/README.md
Normal file
30
Squid/README.md
Normal file
@ -0,0 +1,30 @@
|
|||||||
|
|
||||||
|
|
||||||
|
# Squid
|
||||||
|
|
||||||
|
# Installation
|
||||||
|
|
||||||
|
Pour utiliser Squid tout seul
|
||||||
|
```bash
|
||||||
|
docker compose up -d
|
||||||
|
```
|
||||||
|
|
||||||
|
Pour utiliser Squid avec Traefik
|
||||||
|
```bash
|
||||||
|
docker compose -f docker-compose-traefik.yml up -d
|
||||||
|
```
|
||||||
|
|
||||||
|
Pour utiliser Squid avec Nginx
|
||||||
|
```bash
|
||||||
|
docker compose -f docker-compose-nginx.yml up -d
|
||||||
|
```
|
||||||
|
# Utilisation
|
||||||
|
|
||||||
|
## Accueil
|
||||||
|
|
||||||
|
|
||||||
|
# More info
|
||||||
|
- more information on the website [Tips-Of-Mine](https://www.tips-of-mine.fr/)
|
||||||
|
|
||||||
|
# Buy me a coffe
|
||||||
|
<a href='https://ko-fi.com/R5R2KNI3N' target='_blank'><img height='36' style='border:0px;height:36px;' src='https://storage.ko-fi.com/cdn/kofi4.png?v=3' border='0' alt='Buy Me a Coffee at ko-fi.com' /></a>
|
||||||
68
Squid/conf.d/linux.conf
Normal file
68
Squid/conf.d/linux.conf
Normal file
@ -0,0 +1,68 @@
|
|||||||
|
|
||||||
|
Logo
|
||||||
|
Tickets
|
||||||
|
Demandes d'ajout
|
||||||
|
Jalons
|
||||||
|
Explorateur
|
||||||
|
[Hubert Cornet]
|
||||||
|
Tips-Of-Mine
|
||||||
|
/
|
||||||
|
Applications
|
||||||
|
généré depuis Tips-Of-Mine/Template-Docker
|
||||||
|
Code
|
||||||
|
Demandes d'ajout
|
||||||
|
Wiki
|
||||||
|
Activité
|
||||||
|
Paramètres
|
||||||
|
Applications
|
||||||
|
/squid/conf.d/linux.conf
|
||||||
|
38 lignes
|
||||||
|
1.2 KiB
|
||||||
|
Plaintext
|
||||||
|
#
|
||||||
|
# Squid configuration settings for all linux
|
||||||
|
#
|
||||||
|
|
||||||
|
# Logs are managed by logrotate on Debian
|
||||||
|
logfile_rotate 0
|
||||||
|
|
||||||
|
# For extra security Debian packages only allow
|
||||||
|
# localhost to use the proxy on new installs
|
||||||
|
#
|
||||||
|
#http_access allow localnet
|
||||||
|
acl gitlab dstdomain gitlab.com
|
||||||
|
acl github dstdomain github.com
|
||||||
|
acl api_github dstdomain api.github.com
|
||||||
|
acl security_debian dstdomain security.debian.org
|
||||||
|
acl deb_debian dstdomain deb.debian.org
|
||||||
|
acl ftp_debian dstdomain ftp.debian.org
|
||||||
|
acl packages_sury dstdomain packages.sury.org
|
||||||
|
acl pear_php dstdomain pear.php.net
|
||||||
|
acl packages_adoptium dstdomain packages.adoptium.net
|
||||||
|
acl raw_githubusercontent dstdomain raw.githubusercontent.com
|
||||||
|
acl odeload_github dstdomain codeload.github.com
|
||||||
|
acl packagist dstdomain packagist.org
|
||||||
|
acl repo_packagist dstdomain repo.packagist.org
|
||||||
|
|
||||||
|
http_access allow gitlab
|
||||||
|
http_access allow github
|
||||||
|
http_access allow api_github
|
||||||
|
http_access allow security_debian
|
||||||
|
http_access allow deb_debian
|
||||||
|
http_access allow ftp_debian
|
||||||
|
http_access allow packages_sury
|
||||||
|
http_access allow pear_php
|
||||||
|
http_access allow packages_adoptium
|
||||||
|
http_access allow raw_githubusercontent https_port
|
||||||
|
http_access allow odeload_github https_port
|
||||||
|
http_access allow packagist https_port
|
||||||
|
http_access allow repo_packagist
|
||||||
|
Propulsé par Gitea
|
||||||
|
Version:
|
||||||
|
1.21.5
|
||||||
|
Page:
|
||||||
|
168ms
|
||||||
|
Modèle:
|
||||||
|
17ms
|
||||||
|
Licences
|
||||||
|
API
|
||||||
38
Squid/conf.d/windows.conf
Normal file
38
Squid/conf.d/windows.conf
Normal file
@ -0,0 +1,38 @@
|
|||||||
|
#
|
||||||
|
# Squid configuration settings for all windows
|
||||||
|
#
|
||||||
|
|
||||||
|
# Logs are managed by logrotate on Debian
|
||||||
|
logfile_rotate 0
|
||||||
|
|
||||||
|
# For extra security Debian packages only allow
|
||||||
|
# localhost to use the proxy on new installs
|
||||||
|
#
|
||||||
|
#http_access allow localnet
|
||||||
|
acl gitlab dstdomain gitlab.com
|
||||||
|
acl github dstdomain github.com
|
||||||
|
acl api_github dstdomain api.github.com
|
||||||
|
acl security_debian dstdomain security.debian.org
|
||||||
|
acl deb_debian dstdomain deb.debian.org
|
||||||
|
acl ftp_debian dstdomain ftp.debian.org
|
||||||
|
acl packages_sury dstdomain packages.sury.org
|
||||||
|
acl pear_php dstdomain pear.php.net
|
||||||
|
acl packages_adoptium dstdomain packages.adoptium.net
|
||||||
|
acl raw_githubusercontent dstdomain raw.githubusercontent.com
|
||||||
|
acl odeload_github dstdomain codeload.github.com
|
||||||
|
acl packagist dstdomain packagist.org
|
||||||
|
acl repo_packagist dstdomain repo.packagist.org
|
||||||
|
|
||||||
|
http_access allow gitlab
|
||||||
|
http_access allow github
|
||||||
|
http_access allow api_github
|
||||||
|
http_access allow security_debian
|
||||||
|
http_access allow deb_debian
|
||||||
|
http_access allow ftp_debian
|
||||||
|
http_access allow packages_sury
|
||||||
|
http_access allow pear_php
|
||||||
|
http_access allow packages_adoptium
|
||||||
|
http_access allow raw_githubusercontent https_port
|
||||||
|
http_access allow odeload_github https_port
|
||||||
|
http_access allow packagist https_port
|
||||||
|
http_access allow repo_packagist
|
||||||
18
Squid/docker-compose.yaml
Normal file
18
Squid/docker-compose.yaml
Normal file
@ -0,0 +1,18 @@
|
|||||||
|
version: "3"
|
||||||
|
services:
|
||||||
|
proxy:
|
||||||
|
image: ubuntu/squid
|
||||||
|
ports:
|
||||||
|
- "3128:3128"
|
||||||
|
environment:
|
||||||
|
- TZ=UTC
|
||||||
|
volumes:
|
||||||
|
- ./squid.conf:/etc/squid/squid.conf
|
||||||
|
- ./conf.d:/etc/squid/conf.d
|
||||||
|
configs:
|
||||||
|
- source: squid
|
||||||
|
target: /etc/squid/squid.conf
|
||||||
|
|
||||||
|
configs:
|
||||||
|
squid:
|
||||||
|
file: ./squid.conf
|
||||||
70
Squid/squid.conf
Normal file
70
Squid/squid.conf
Normal file
@ -0,0 +1,70 @@
|
|||||||
|
# Listening
|
||||||
|
|
||||||
|
http_port 3128
|
||||||
|
https_port 3129 tls-cert=/etc/squid/ssl/SLPXYP01.tips-of-mine.crt tls-key=/etc/squid/ssl/SLPXYP01.tips-of-mine.key
|
||||||
|
|
||||||
|
# Logging
|
||||||
|
|
||||||
|
access_log daemon:/var/log/squid/access.log common
|
||||||
|
access_log syslog:local7.info common # Log to syslog sent to QRadar for Login Sécurité
|
||||||
|
|
||||||
|
# Local networks
|
||||||
|
acl localnet dst 0.0.0.1-0.255.255.255 # RFC 1122 "this" network (LAN)
|
||||||
|
acl localnet dst 10.0.0.0/23 # RFC 1918 local private network (LAN)
|
||||||
|
acl localnet dst 100.64.0.0/10 # RFC 6598 shared address space (CGN)
|
||||||
|
acl localnet dst 169.254.0.0/16 # RFC 3927 link-local (directly plugged) machines
|
||||||
|
acl localnet dst 172.16.0.0/12 # RFC 1918 local private network (LAN)
|
||||||
|
acl localnet dst 192.168.0.0/16 # RFC 1918 local private network (LAN)
|
||||||
|
acl localnet dst fc00::/7 # RFC 4193 local private network range
|
||||||
|
acl localnet dst fe80::/10 # RFC 4291 link-local (directly plugged) machines
|
||||||
|
|
||||||
|
acl SSL_ports port 443
|
||||||
|
acl Safe_ports port 80 # http
|
||||||
|
acl Safe_ports port 21 # ftp
|
||||||
|
acl Safe_ports port 443 # https
|
||||||
|
acl Safe_ports port 70 # gopher
|
||||||
|
acl Safe_ports port 210 # wais
|
||||||
|
acl Safe_ports port 1025-65535 # unregistered ports
|
||||||
|
acl Safe_ports port 280 # http-mgmt
|
||||||
|
acl Safe_ports port 488 # gss-http
|
||||||
|
acl Safe_ports port 591 # filemaker
|
||||||
|
acl Safe_ports port 777 # multiling http
|
||||||
|
acl CONNECT method CONNECT
|
||||||
|
|
||||||
|
acl https_port port 443
|
||||||
|
acl http_port port 80
|
||||||
|
acl ftp_port port 21
|
||||||
|
acl sftp_port port 22
|
||||||
|
acl ftp_port port 990
|
||||||
|
acl 993_port port 993
|
||||||
|
acl 8080_port port 8080
|
||||||
|
|
||||||
|
acl ftp proto FTP
|
||||||
|
always_direct allow FTP
|
||||||
|
|
||||||
|
# Deny requests to certain unsafe ports
|
||||||
|
#http_access deny !Safe_ports
|
||||||
|
|
||||||
|
# Deny CONNECT to other than secure SSL ports
|
||||||
|
#http_access deny CONNECT !SSL_ports
|
||||||
|
|
||||||
|
# Only allow cachemgr access from localhost
|
||||||
|
http_access allow localhost manager
|
||||||
|
http_access deny manager
|
||||||
|
|
||||||
|
# Deny localhost
|
||||||
|
http_access allow localhost
|
||||||
|
|
||||||
|
# No using proxy to access local network
|
||||||
|
http_access deny localnet
|
||||||
|
|
||||||
|
cache deny all
|
||||||
|
|
||||||
|
include /etc/squid/conf.d/*
|
||||||
|
include /etc/squid/conf.d/01-dev/*
|
||||||
|
include /etc/squid/conf.d/02-rec/*
|
||||||
|
include /etc/squid/conf.d/03-preprod/*
|
||||||
|
include /etc/squid/conf.d/04-prod/*
|
||||||
|
|
||||||
|
# And finally deny all other access to this proxy
|
||||||
|
http_access deny all
|
||||||
Loading…
x
Reference in New Issue
Block a user