Add squid firewall rule

ComputeCanada · Dec 17, 2024 · c39d61c · c39d61c
1 parent 625b02f
commit c39d61c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/site/profile/manifests/squid.pp b/site/profile/manifests/squid.pp
@@ -5,6 +5,10 @@
 ) {
   include profile::consul
 
+  nftables::rule { 'default_in-squid':
+    content => "tcp dport 3128 accept comment \"Accept squid\"",
+  }
+
   class { 'squid': }
   squid::http_port { String($port): }
   squid::acl { 'SSL_ports':