28 lines
847 B
SquidConf
28 lines
847 B
SquidConf
# Definition der Ziele (Ollama Registry)
|
|
acl ollama_domains dstdomain .ollama.ai
|
|
acl ollama_domains dstdomain .ollama.com
|
|
acl ollama_domains dstdomain .cloudflare.com
|
|
acl ollama_domains dstdomain .github.com
|
|
acl ollama_domains dstdomain .githubusercontent.com
|
|
|
|
# Erlaubt Zugriff von allen gängigen privaten Docker/Podman Subnetzen
|
|
acl private_nets src 10.0.0.0/8
|
|
acl private_nets src 172.16.0.0/12
|
|
acl private_nets src 192.168.0.0/16
|
|
http_access allow private_nets
|
|
http_access allow localhost
|
|
|
|
# Standard-Ports erlauben
|
|
acl Safe_ports port 80
|
|
acl Safe_ports port 443
|
|
http_access deny !Safe_ports
|
|
|
|
# Nur die Whitelist erlauben, alles andere blockieren
|
|
http_access allow ollama_domains
|
|
http_access deny all
|
|
|
|
# Proxy-Port
|
|
http_port 3128
|
|
|
|
acl local_network src 10.89.0.0/16 # Adjust to your Podman subnet if different
|
|
http_access allow local_network |