summaryrefslogtreecommitdiff
path: root/hieradata
diff options
context:
space:
mode:
authorJan Dittberner <jandd@cacert.org>2019-07-28 13:55:21 +0200
committerJan Dittberner <jandd@cacert.org>2019-07-28 13:55:21 +0200
commit96e2432d0906fad1f4b822d08e72d81dbe111f34 (patch)
tree771e603de346da5ffaafd0d99acbf1dd63177be1 /hieradata
parent2ebfaae507612c9ff99b9cf02a6f8bc5ab9dad87 (diff)
downloadcacert-puppet-96e2432d0906fad1f4b822d08e72d81dbe111f34.tar.gz
cacert-puppet-96e2432d0906fad1f4b822d08e72d81dbe111f34.tar.xz
cacert-puppet-96e2432d0906fad1f4b822d08e72d81dbe111f34.zip
Allow access to wordpress domains from blog
Diffstat (limited to 'hieradata')
-rw-r--r--hieradata/nodes/proxyout.yaml4
1 files changed, 4 insertions, 0 deletions
diff --git a/hieradata/nodes/proxyout.yaml b/hieradata/nodes/proxyout.yaml
index 322c53d..64a00f4 100644
--- a/hieradata/nodes/proxyout.yaml
+++ b/hieradata/nodes/proxyout.yaml
@@ -7,6 +7,8 @@ profiles::base::admins:
profiles::squid::acls:
- "localnet src 10.0.0.0/24"
- "localnet src 172.16.2.0/24"
+ - "blog src 172.16.2.13"
+ - "blog src 10.0.0.13"
- "jenkins src 172.16.2.115"
- "jenkins src 10.0.0.115"
- "puppet src 172.16.2.10"
@@ -31,11 +33,13 @@ profiles::squid::acls:
- "pypi dstdomain pypi.org"
- "pypi dstdomain .pythonhosted.org"
- "cacert dstdomain .cacert.org"
+ - "wordpress dstdomain .wordpress.org"
profiles::squid::http_access:
- "allow localnet debmirror"
- "allow localnet debpuppet"
- "allow localnet debmariadb"
- "allow localnet cacert"
+ - "allow blog wordpress"
- "allow jenkins debjenkins"
- "allow jenkins github"
- "allow jenkins pypi"