← Back to branch summary

~andreserl/maas/lp1575337

« back to all changes in this revision

Viewing changes to debian/extras/maas-proxy.conf

  • Committer: MAAS Lander
  • Author(s): LaMont Jones
  • Date: 2016-04-01 20:06:29 UTC
  • mfrom: (470.2.4 packaging.maas-proxy)
  • Revision ID: maas_lander-20160401200629-h2e6w15hrgygtlat
[r=andreserl][bug=1379567][author=lamont] Packaging changes for maas-proxy lockdown.

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/extras/maas-proxy.conf
1
 
# Inspired by UDS's conference proxy
2
 
 
3
 
acl maas_proxy_manager proto cache_object
4
 
acl localhost src 127.0.0.1/32 ::1
5
 
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
6
 
acl localnet src all # TODO: We should auto-generate this with the networks MAAS manages/knows about.
7
 
acl SSL_ports port 443
8
 
acl Safe_ports port 80          # http
9
 
acl Safe_ports port 21          # ftp
10
 
acl Safe_ports port 443         # https
11
 
acl Safe_ports port 1025-65535  # unregistered ports
12
 
acl CONNECT method CONNECT
13
 
http_access allow maas_proxy_manager localhost
14
 
http_access deny maas_proxy_manager
15
 
http_access deny !Safe_ports
16
 
http_access deny CONNECT !SSL_ports
17
 
http_access allow localnet
18
 
http_access allow localhost
19
 
http_access deny all
20
 
http_port 3128 transparent
21
 
http_port 8000
22
 
coredump_dir /var/spool/maas-proxy
23
 
refresh_pattern ^ftp:           1440    20%     10080
24
 
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
25
 
refresh_pattern \/Release(|\.gpg)$                        0    0%    0 refresh-ims
26
 
refresh_pattern \/InRelease$                              0    0%    0 refresh-ims
27
 
refresh_pattern \/(Packages|Sources)(|\.bz2|\.gz|\.xz)$   0    0%    0 refresh-ims
28
 
refresh_pattern \/(Translation-.*)(|\.bz2|\.gz|\.xz)$     0    0%    0 refresh-ims
29
 
refresh_pattern .               0       20%     4320
30
 
forwarded_for delete
31
 
visible_hostname maas.proxy # TODO: This should be autogenerated by a template.
32
 
cache_mem 512 MB
33
 
minimum_object_size 0 MB
34
 
maximum_object_size 1024 MB
35
 
maximum_object_size_in_memory 100 MB
36
 
cache_dir aufs /var/spool/maas-proxy 40000 16 256
37
 
# use different logs
38
 
cache_access_log /var/log/maas/proxy/access.log
39
 
cache_log /var/log/maas/proxy/cache.log
40
 
cache_store_log /var/log/maas/proxy/store.log