Allow access to wordpress domains from blog
authorJan Dittberner <jandd@cacert.org>
Sun, 28 Jul 2019 11:55:21 +0000 (13:55 +0200)
committerJan Dittberner <jandd@cacert.org>
Sun, 28 Jul 2019 11:55:21 +0000 (13:55 +0200)
hieradata/nodes/proxyout.yaml

index 322c53d..64a00f4 100644 (file)
@@ -7,6 +7,8 @@ profiles::base::admins:
 profiles::squid::acls:
     - "localnet src 10.0.0.0/24"
     - "localnet src 172.16.2.0/24"
+    - "blog src 172.16.2.13"
+    - "blog src 10.0.0.13"
     - "jenkins src 172.16.2.115"
     - "jenkins src 10.0.0.115"
     - "puppet src 172.16.2.10"
@@ -31,11 +33,13 @@ profiles::squid::acls:
     - "pypi dstdomain pypi.org"
     - "pypi dstdomain .pythonhosted.org"
     - "cacert dstdomain .cacert.org"
+    - "wordpress dstdomain .wordpress.org"
 profiles::squid::http_access:
     - "allow localnet debmirror"
     - "allow localnet debpuppet"
     - "allow localnet debmariadb"
     - "allow localnet cacert"
+    - "allow blog wordpress"
     - "allow jenkins debjenkins"
     - "allow jenkins github"
     - "allow jenkins pypi"