From b96164ce118f81a537204835f1f8efd65e518f9a Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Thu, 22 Feb 2024 20:40:51 -0600
Subject: [PATCH] gw1: Allow rpm.grafana.com via proxy

In order to install Promtail on machines (e.g. *unifi1*) that do not
have direct access to the Internet.
---
 host_vars/gw1.pyrocufflink.blue/squid.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/host_vars/gw1.pyrocufflink.blue/squid.yml b/host_vars/gw1.pyrocufflink.blue/squid.yml
index 9642567..340d876 100644
--- a/host_vars/gw1.pyrocufflink.blue/squid.yml
+++ b/host_vars/gw1.pyrocufflink.blue/squid.yml
@@ -18,6 +18,8 @@ squid_acl:
   google_fonts:
   - dstdomain fonts.googleapis.com
   - dstdomain fonts.gstatic.com
+  grafana_rpm:
+  - dstdomain rpm.grafana.com
 
 squid_http_access:
 - 'deny !Safe_ports'
@@ -26,6 +28,7 @@ squid_http_access:
 - deny manager
 - deny to_localhost
 - allow localnet fedora_repo
+- allow localnet grafana_rpm
 - allow google_fonts
 - deny all