From 93eeaaaed4293d69b2e76be0cbc709caaca21530 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Wed, 26 Jun 2024 18:39:25 -0500
Subject: [PATCH] gw1: Allow access to DCH yum repo via proxy

Allows installing _sshca-cli-systemd_ from Kickstart.
---
 host_vars/gw1.pyrocufflink.blue/squid.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/host_vars/gw1.pyrocufflink.blue/squid.yml b/host_vars/gw1.pyrocufflink.blue/squid.yml
index 05cf9ee..32abeba 100644
--- a/host_vars/gw1.pyrocufflink.blue/squid.yml
+++ b/host_vars/gw1.pyrocufflink.blue/squid.yml
@@ -22,6 +22,8 @@ squid_acl:
   fedora_repo:
   - dstdomain mirrors.fedoraproject.org
   - dstdomain dl.fedoraproject.org
+  dch_repo:
+  - url_regex files.pyrocufflink.blue/yum/.+
   google_fonts:
   - dstdomain fonts.googleapis.com
   - dstdomain fonts.gstatic.com
@@ -39,6 +41,7 @@ squid_http_access:
 - allow localnet grafana_rpm
 - allow google_fonts
 - allow trusted kickstart
+- allow trusted dch_repo
 - deny all
 
 squid_cache_dir: