*unifi2.pyrocufflink.blue*, which is connected to the management network, can only access the Internet via the proxy. In order for Zincati/`rpm-ostree` to automatically update the machine, the proxy needs to allow access to the FCOS update servers.