netbird/plugins
0
0
Fork 0
mirror of https://github.com/netbirdio/plugins.git synced 2026-05-22 18:44:07 -07:00
Code Issues Packages Projects Releases Wiki Activity

www/c-icap: Define localserver acl once. (#4836)

Browse Source 
* www/c-icap: Define localserver acl once.

* www/c-icap: Change maintainer.
This commit is contained in:
Andy Binder
2025-07-25 19:18:06 +02:00
committed by GitHub
parent 4550a74e67
commit 8439492503
2 changed files with 6 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
www/c-icap/Makefile
+1 -1
View File
@@ -2,6 +2,6 @@ PLUGIN_NAME= c-icap
PLUGIN_VERSION= 1.8
PLUGIN_COMMENT= c-icap connects the web proxy with a virus scanner
PLUGIN_DEPENDS= c-icap c-icap-modules
PLUGIN_MAINTAINER= m.muenz@gmail.com
PLUGIN_MAINTAINER= andybinder@gmx.de
.include "../../Mk/plugins.mk"
www/c-icap/src/opnsense/service/templates/OPNsense/CICAP/c-icap.conf
+5 -10
View File
@@ -42,15 +42,15 @@ ServerName {{ OPNsense.cicap.general.servername }}
{% else %}
ServerName {{ system.hostname }}
{% endif %}
{% if not helpers.empty('OPNsense.cicap.general.listenaddress') %}
acl localserver srvip {{ OPNsense.cicap.general.listenaddress }}
{% else %}
acl localserver srvip ::1
{% endif %}
{% if helpers.exists('OPNsense.cicap.general.localSquid') and OPNsense.cicap.general.localSquid == '1' %}
{% if helpers.exists('OPNsense.proxy.forward.icap.SendUsername') and OPNsense.proxy.forward.icap.SendUsername == '1' %}
RemoteProxyUsers on
acl AUTH auth *
{% if not helpers.empty('OPNsense.cicap.general.listenaddress') %}
acl localserver srvip {{ OPNsense.cicap.general.listenaddress }}
{% else %}
acl localserver srvip ::1
{% endif %}
icap_access allow AUTH localserver
{% else %}
RemoteProxyUsers off
@@ -66,11 +66,6 @@ RemoteProxyUserHeader {{OPNsense.proxy.forward.icap.UsernameHeader}}
{% else %}
RemoteProxyUsers on
acl AUTH auth *
{% if not helpers.empty('OPNsense.cicap.general.listenaddress') %}
acl localserver srvip {{ OPNsense.cicap.general.listenaddress }}
{% else %}
acl localserver srvip ::1
{% endif %}
icap_access allow AUTH localserver
RemoteProxyUserHeaderEncoded on
RemoteProxyUserHeader X-Authenticated-User