CyberMind-FR
189715e2ee
- Generate CA certificate for SSL bumping - Initialize SSL certificate database with security_file_certgen - Selective SSL bump: only cache-worthy domains (Windows Update, Steam, etc.) - Exclude security-sensitive sites (banking, Google accounts, etc.) - Proper firewall integration for both HTTP and HTTPS redirect - RPCD methods for CA cert download and SSL bump control Ports: - 3128: Forward proxy - 3129: HTTP transparent intercept - 3130: HTTPS SSL bump intercept Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
90 lines
2.5 KiB
Plaintext
90 lines
2.5 KiB
Plaintext
config cdn_cache 'main'
|
|
option enabled '0'
|
|
option cache_dir '/var/cache/cdn-squid'
|
|
option cache_size '2048'
|
|
option max_object_size '1024'
|
|
option cache_valid '10080'
|
|
option listen_port '3128'
|
|
option transparent '1'
|
|
option ssl_bump '0'
|
|
option log_level '1'
|
|
|
|
config cache_policy 'windows_update'
|
|
option enabled '1'
|
|
option name 'Windows Update'
|
|
option domains 'windowsupdate.com download.microsoft.com'
|
|
option extensions 'exe msu cab msi'
|
|
option cache_time '10080'
|
|
option max_size '2048'
|
|
option priority '10'
|
|
|
|
config cache_policy 'linux_repos'
|
|
option enabled '1'
|
|
option name 'Linux Repositories'
|
|
option domains 'archive.ubuntu.com deb.debian.org mirrors.kernel.org'
|
|
option extensions 'deb rpm pkg.tar.zst'
|
|
option cache_time '4320'
|
|
option max_size '1024'
|
|
option priority '10'
|
|
|
|
config cache_policy 'android_apps'
|
|
option enabled '1'
|
|
option name 'Android Apps'
|
|
option domains 'play.googleapis.com apk-dl.com'
|
|
option extensions 'apk obb'
|
|
option cache_time '10080'
|
|
option max_size '512'
|
|
option priority '5'
|
|
|
|
config cache_policy 'steam_games'
|
|
option enabled '1'
|
|
option name 'Steam/Gaming'
|
|
option domains 'steampowered.com steamcontent.com steamcdn-a.akamaihd.net epicgames-download1.akamaized.net origin-a.akamaihd.net'
|
|
option extensions 'zip pak vpk depot manifest'
|
|
option cache_time '43200'
|
|
option max_size '10240'
|
|
option priority '1'
|
|
|
|
config cache_policy 'apple_updates'
|
|
option enabled '1'
|
|
option name 'Apple Updates'
|
|
option domains 'swcdn.apple.com swscan.apple.com itunes.apple.com'
|
|
option extensions 'ipa pkg dmg'
|
|
option cache_time '10080'
|
|
option max_size '4096'
|
|
option priority '8'
|
|
|
|
config cache_policy 'openwrt_packages'
|
|
option enabled '1'
|
|
option name 'OpenWrt Packages'
|
|
option domains 'downloads.openwrt.org'
|
|
option extensions 'ipk'
|
|
option cache_time '10080'
|
|
option max_size '512'
|
|
option priority '10'
|
|
|
|
config cache_policy 'static_content'
|
|
option enabled '1'
|
|
option name 'Static Web Content'
|
|
option domains '*'
|
|
option extensions 'js css woff woff2 ttf png jpg jpeg gif svg ico webp'
|
|
option cache_time '1440'
|
|
option max_size '50'
|
|
option priority '1'
|
|
|
|
config exclusion 'bypass_https'
|
|
option enabled '1'
|
|
option name 'HTTPS Banking'
|
|
option domains 'bank paypal stripe'
|
|
option reason 'Security sensitive'
|
|
|
|
config exclusion 'bypass_streaming'
|
|
option enabled '1'
|
|
option name 'Video Streaming'
|
|
option domains 'netflix.com youtube.com twitch.tv'
|
|
option reason 'Real-time content'
|
|
|
|
config statistics 'stats'
|
|
option retention_days '30'
|
|
option sample_interval '60'
|