---
classes:
  - roles::proxyout
profiles::base::admins:
  - jandd
  - law
profiles::squid::acls:
  - "blog src 10.0.0.13"
  - "blog src 172.16.2.13"
  - "code src 10.0.3.15"
  - "jenkins src 10.0.0.115"
  - "jenkins src 172.16.2.115"
  - "puppet src 10.0.0.200"
  - "puppet src 172.16.2.10"
  - "test src 10.0.0.248"
  - "test src 172.16.2.248"
  - "test2 src 10.0.0.249"
  - "testmgr src 10.0.0.148"
  - "testmgr src 172.16.2.10"
  - "wiki src 10.0.0.12"
  - "wiki src 172.16.2.12"
  - "cacert dstdomain .cacert.org"
  - "debjenkins dstdomain .jenkins-ci.org"
  - "debjenkins dstdomain .jenkins.io"
  - "debjenkins dstdomain ftp-chi.osuosl.org"
  - "debjenkins dstdomain ftp-nyc.osuosl.org"
  - "debjenkins dstdomain ftp.belnet.be"
  - "debjenkins dstdomain ftp.halifax.rwth-aachen.de"
  - "debjenkins dstdomain ftp.yz.yamagata-u.ac.jp"
  - "debjenkins dstdomain mirror.esuni.jp"
  - "debjenkins dstdomain mirror.gruenehoelle.nl"
  - "debjenkins dstdomain mirrors.seville-jam.es"
  - "debjenkins dstdomain mirrors.tuna.tsinghua.edu.cn"
  - "debjenkins dstdomain prodjenkinsreleases.blob.core.windows.net"
  - "debmariadb dstdomain mirror2.hs-esslingen.de"
  - "debmirror dstdomain .debian.org"
  - "debnginx dstdomain packages.nginx.org"
  - "debpgsql dstdomain apt.postgresql.org"
  - "debpuppet dstdomain apt.puppet.com"
  - "debpuppet dstdomain apt.puppetlabs.com"
  - "gitea dstdomain .gitea.io"
  - "github dstdomain github.com"
  - "github dstdomain raw.githubusercontent.com"
  - "golang dstdomain dl.google.com"
  - "golang dstdomain go.dev"
  - "golang dstdomain golang.org"
  - "puppetforge dstdomain forgeapi-cdn.puppet.com"
  - "puppetforge dstdomain forgeapi.puppet.com"
  - "puppetforge dstdomain forgeapi.puppetlabs.com"
  - "pypi dstdomain .pythonhosted.org"
  - "pypi dstdomain pypi.org"
  - "rubygems dstdomain api.rubygems.org"
  - "wordpress dstdomain .wordpress.org"
profiles::squid::http_access:
  - "allow localnet cacert"
  - "allow localnet debmariadb"
  - "allow localnet debmirror"
  - "allow localnet debpuppet"
  - "allow blog wordpress"
  - "allow code gitea"
  - "allow jenkins debjenkins"
  - "allow jenkins github"
  - "allow jenkins golang"
  - "allow jenkins pypi"
  - "allow puppet puppetforge"
  - "allow puppet rubygems"
  - "allow test github"
  - "allow test2 github"
  - "allow testmgr github"
  - "allow wiki debnginx"
profiles::icinga2_agent::pki_ticket: >
  ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
  DQYJKoZIhvcNAQEBBQAEggEAm5KSv0YCITiy1Ksq18qTDh9IrErDZXBC+Uk5
  MHMtqKeqVrXurra+1Re1hARt0dp4UblCduCJB7P9Ui49WTNI86zY9vippZwn
  3kDvGGb3863uPyTIL0P815EMJBy5fp4LtdbhGe292X1YT8gG02NIHK9RP+Vy
  HfEatEXnqALc4Cl8DrQIJX6SbovMGk5UsruVIvx7vS0SNt+3S2OuBXey3ytY
  oM50z2rhC2W6U0Lx+WP6O9qvkBEkk0XRcItbSikOCtdyx8HmNMBgvk9Ua2Ez
  6jcCKK7C3dVgP1ozePBe3mLtoW/1CMa7DW3GXZlvAmPVAXrgq3p38tU9cLgn
  l3OItTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDuDYIvmEvS8bxxG+X6
  dooHgDC34jNr87PoPPOatjAils7c2P/+X7oJmKrXBFJDbkoq2AvbdsYh3xrh
  oXDvD84MDl8=]