diff --git a/host_vars/gw1.pyrocufflink.blue/squid.yml b/host_vars/gw1.pyrocufflink.blue/squid.yml
index 340d876..235fd67 100644
--- a/host_vars/gw1.pyrocufflink.blue/squid.yml
+++ b/host_vars/gw1.pyrocufflink.blue/squid.yml
@@ -12,6 +12,9 @@ squid_acl:
   - 'port 443		# https'
   CONNECT:
   - method CONNECT
+  fcos_updates:
+  - dstdomain updates.coreos.fedoraproject.org
+  - dstdomain ostree.fedoraproject.org
   fedora_repo:
   - dstdomain mirrors.fedoraproject.org
   - dstdomain dl.fedoraproject.org
@@ -27,6 +30,7 @@ squid_http_access:
 - allow localhost manager
 - deny manager
 - deny to_localhost
+- allow localnet fcos_updates
 - allow localnet fedora_repo
 - allow localnet grafana_rpm
 - allow google_fonts