---
classes:
  - roles::proxyout
profiles::base::admins:
  - jandd
  - law
profiles::squid::acls:
    - "localnet src 10.0.0.0/24"
    - "localnet src 172.16.2.0/24"
    - "jenkins src 172.16.2.115"
    - "jenkins src 10.0.0.115"
    - "puppet src 172.16.2.10"
    - "test src 172.16.2.248"
    - "testmgr src 172.16.2.10"
    - "debmirror dstdomain .debian.org"
    - "debpgsql dstdomain apt.postgresql.org"
    - "debmariadb dstdomain mirror2.hs-esslingen.de"
    - "debpuppet dstdomain apt.puppetlabs.com"
    - "debjenkins dstdomain pkg.jenkins-ci.org"
    - "debjenkins dstdomain mirrors.jenkins.io"
    - "debjenkins dstdomain ftp-chi.osuosl.org"
    - "debjenkins dstdomain ftp-nyc.osuosl.org"
    - "debjenkins dstdomain archives.jenkins-ci.org"
    - "debjenkins dstdomain mirrors.seville-jam.es"
    - "debjenkins dstdomain mirror.esuni.jp"
    - "debjenkins dstdomain ftp.yz.yamagata-u.ac.jp"
    - "debjenkins dstdomain mirrors.tuna.tsinghua.edu.cn"
    - "rubygems dstdomain api.rubygems.org"
    - "puppetforge dstdomain forgeapi.puppetlabs.com"
    - "github dstdomain github.com"
    - "pypi dstdomain pypi.org"
    - "pypi dstdomain .pythonhosted.org"
    - "cacert dstdomain .cacert.org"
profiles::squid::http_access:
    - "allow localnet debmirror"
    - "allow localnet debpuppet"
    - "allow localnet debmariadb"
    - "allow localnet cacert"
    - "allow jenkins debjenkins"
    - "allow jenkins github"
    - "allow jenkins pypi"
    - "allow puppet rubygems"
    - "allow puppet puppetforge"
    - "allow test github"
    - "allow testmgr github"