Skip to content

Commit

Permalink
🔧 Fix(docker/volumes/ssrf_proxy/squid.conf): Added include of externa…
Browse files Browse the repository at this point in the history
…l config files like in ubuntu/squid docker image to prevent crashes on startup

Include /etc/squid/conf.d/ directory to improve configuration flexibility and extensibility.
* max_filedescriptors 1024 in /etc/squid/conf.d/rock.conf prevents crashes due to excessive memory usage. see: https://bugs.launchpad.net/ubuntu-docker-images/+bug/1978272
* Removed local network access control and logfile_rotate settings from squid.conf as they are located in /etc/squid/conf.d/debian.conf.
  • Loading branch information
takuya-o committed Jun 9, 2024
1 parent 5986841 commit 4ea0a5e
Showing 1 changed file with 2 additions and 3 deletions.
5 changes: 2 additions & 3 deletions docker/volumes/ssrf_proxy/squid.conf
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow localhost
http_access allow localnet
include /etc/squid/conf.d/*.conf
http_access deny all

################################## Proxy Server ################################
Expand All @@ -37,7 +37,6 @@ refresh_pattern \/Release(|\.gpg)$ 0 0% 0 refresh-ims
refresh_pattern \/InRelease$ 0 0% 0 refresh-ims
refresh_pattern \/(Translation-.*)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims
refresh_pattern . 0 20% 4320
logfile_rotate 0

# upstream proxy, set to your own upstream proxy IP to avoid SSRF attacks
# cache_peer 172.1.1.1 parent 3128 0 no-query no-digest no-netdb-exchange default
Expand All @@ -47,4 +46,4 @@ logfile_rotate 0
http_port 8194 accel vhost
cache_peer sandbox parent 8194 0 no-query originserver
acl src_all src all
http_access allow src_all
http_access allow src_all

0 comments on commit 4ea0a5e

Please sign in to comment.