configpolicy

dustin

configpolicy

Fork 0

Commit Graph

Author	SHA1	Message	Date
Dustin	b96164ce11	gw1: Allow rpm.grafana.com via proxy In order to install Promtail on machines (e.g. unifi1) that do not have direct access to the Internet.	2024-02-22 20:40:51 -06:00
Dustin	be63424fd8	hosts: Deploy Squid on gw1 Running Squid on the firewall makes sense; it's a sort of layer-7 firewall, after all. There's not much storage on that machine, though so we don't really want to cache anything. In fact, it's only purpose is to allow very limited web access for certain applications. All outbound traffic is blocked, with two exceptions: * Fedora package repositories (for the UniFi controller server) * Google Fonts (for Invoice Ninja)	2024-01-27 20:09:34 -06:00

Author

SHA1

Message

Date

Dustin

b96164ce11

gw1: Allow rpm.grafana.com via proxy

In order to install Promtail on machines (e.g. *unifi1*) that do not
have direct access to the Internet.

2024-02-22 20:40:51 -06:00

Dustin

be63424fd8

hosts: Deploy Squid on gw1

Running Squid on the firewall makes sense; it's a sort of layer-7
firewall, after all.  There's not much storage on that machine, though
so we don't really want to cache anything.  In fact, it's only purpose
is to allow very limited web access for certain applications.  All
outbound traffic is blocked, with two exceptions:

* Fedora package repositories (for the UniFi controller server)
* Google Fonts (for Invoice Ninja)

2024-01-27 20:09:34 -06:00

2 Commits (ffe972d79b58349df626ca519b1582b9035513eb)