chaas/ispmail-workaround-org
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update dist for prod

Browse source
This commit is contained in:
forgejo-actions[bot] 2026-07-06 20:16:53 +00:00
parent 8354f8d2cf
commit 15ccc2715d
22 changed files with 19 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

2
squid-acls/index.html
View file

@ -118,4 +118,4 @@
<p>The second <em>http_access</em> line would force the user to re-authenticate time and again if he/she is not member of the PROXY_ALLOWED group. This is perhaps not what you want. You rather wanted to deny access to non-members. So you need to rewrite this <em>http_access</em> line so that an ACL matches that has nothing to do with authentication. This is the correct example:</p>
<div class="expressive-code"><figure class="frame not-content"><figcaption class="header"></figcaption><pre data-language="plaintext"><code><div class="ec-line"><div class="code"><span style="--0:#d6deeb;--1:#403f53">acl ldap-auth proxy_auth REQUIRED</span></div></div><div class="ec-line"><div class="code"><span style="--0:#d6deeb;--1:#403f53">acl ldapgroup-allowed external LDAP_group PROXY_ALLOWED</span></div></div><div class="ec-line"><div class="code"><span style="--0:#d6deeb;--1:#403f53">acl dummy src 0.0.0.0/0.0.0.0</span></div></div><div class="ec-line"><div class="code">
</div></div><div class="ec-line"><div class="code"><span style="--0:#d6deeb;--1:#403f53">http_access deny !ldap-auth</span></div></div><div class="ec-line"><div class="code"><span style="--0:#d6deeb;--1:#403f53">http_access deny !ldapgroup-allowed dummy</span></div></div><div class="ec-line"><div class="code"><span style="--0:#d6deeb;--1:#403f53">http_access allow all</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="acl ldap-auth proxy_auth REQUIREDacl ldapgroup-allowed external LDAP_group PROXY_ALLOWEDacl dummy src 0.0.0.0/0.0.0.0http_access deny !ldap-authhttp_access deny !ldapgroup-allowed dummyhttp_access allow all"><div></div></button></div></figure></div>
<p>This way the second <em>http_access</em> line still matches. But it’s the <em>dummy</em> ACL which is now last in the line. Since <em>dummy</em> is a static ACL (that always matches) and has nothing to do with authentication you will find that the access is just denied.</p></div><footer><footer class="sl-flex astro-xhxjzfa7"><div class="meta sl-flex astro-xhxjzfa7"><p>Last updated: <time datetime="2026-07-06T20:11:06.000Z">Jul 6, 2026</time></p></div><div class="pagination-links print:hidden astro-jgq3vlii" dir="ltr"><a href="/rsnapshot-and-usb-drives/" rel="prev" class="astro-jgq3vlii"><svg aria-hidden="true" class="astro-jgq3vlii astro-n5k4ipy7" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1.5rem;"><path d="M17 11H9.41l3.3-3.29a1.004 1.004 0 1 0-1.42-1.42l-5 5a1 1 0 0 0-.21.33 1 1 0 0 0 0 .76 1 1 0 0 0 .21.33l5 5a1.002 1.002 0 0 0 1.639-.325 1 1 0 0 0-.219-1.095L9.41 13H17a1 1 0 0 0 0-2Z"/></svg><span class="astro-jgq3vlii">Previous<br class="astro-jgq3vlii"><span class="link-title astro-jgq3vlii">Backups with rsnaphot to external USB drives</span></span></a><a href="/understanding-lvm/" rel="next" class="astro-jgq3vlii"><svg aria-hidden="true" class="astro-jgq3vlii astro-n5k4ipy7" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1.5rem;"><path d="M17.92 11.62a1.001 1.001 0 0 0-.21-.33l-5-5a1.003 1.003 0 1 0-1.42 1.42l3.3 3.29H7a1 1 0 0 0 0 2h7.59l-3.3 3.29a1.002 1.002 0 0 0 .325 1.639 1 1 0 0 0 1.095-.219l5-5a1 1 0 0 0 .21-.33 1 1 0 0 0 0-.76Z"/></svg><span class="astro-jgq3vlii">Next<br class="astro-jgq3vlii"><span class="link-title astro-jgq3vlii">Understanding the Logical Volume Manager (LVM)</span></span></a></div></footer><script defer src="https://comentario.workaround.org/comentario.js"></script><comentario-comments no-fonts="true" id="comments"></comentario-comments><div class="myfooter">This guide is maintained by <a href="mailto:ispmail@christoph-haas.de">Christoph Haas</a> since 2003. All content on workaround.org can be used under the terms of the<a href="https://creativecommons.org/licenses/by-nc-sa/4.0/" target="_blank">Creative Commons BY-NC-SA license</a>. Penguin image based on AI art because I suck at drawing.</div></footer></div></div></main></div></div></div></div></body></html>
<p>This way the second <em>http_access</em> line still matches. But it’s the <em>dummy</em> ACL which is now last in the line. Since <em>dummy</em> is a static ACL (that always matches) and has nothing to do with authentication you will find that the access is just denied.</p></div><footer><footer class="sl-flex astro-xhxjzfa7"><div class="meta sl-flex astro-xhxjzfa7"><p>Last updated: <time datetime="2026-07-06T20:15:43.000Z">Jul 6, 2026</time></p></div><div class="pagination-links print:hidden astro-jgq3vlii" dir="ltr"><a href="/rsnapshot-and-usb-drives/" rel="prev" class="astro-jgq3vlii"><svg aria-hidden="true" class="astro-jgq3vlii astro-n5k4ipy7" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1.5rem;"><path d="M17 11H9.41l3.3-3.29a1.004 1.004 0 1 0-1.42-1.42l-5 5a1 1 0 0 0-.21.33 1 1 0 0 0 0 .76 1 1 0 0 0 .21.33l5 5a1.002 1.002 0 0 0 1.639-.325 1 1 0 0 0-.219-1.095L9.41 13H17a1 1 0 0 0 0-2Z"/></svg><span class="astro-jgq3vlii">Previous<br class="astro-jgq3vlii"><span class="link-title astro-jgq3vlii">Backups with rsnaphot to external USB drives</span></span></a><a href="/understanding-lvm/" rel="next" class="astro-jgq3vlii"><svg aria-hidden="true" class="astro-jgq3vlii astro-n5k4ipy7" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1.5rem;"><path d="M17.92 11.62a1.001 1.001 0 0 0-.21-.33l-5-5a1.003 1.003 0 1 0-1.42 1.42l3.3 3.29H7a1 1 0 0 0 0 2h7.59l-3.3 3.29a1.002 1.002 0 0 0 .325 1.639 1 1 0 0 0 1.095-.219l5-5a1 1 0 0 0 .21-.33 1 1 0 0 0 0-.76Z"/></svg><span class="astro-jgq3vlii">Next<br class="astro-jgq3vlii"><span class="link-title astro-jgq3vlii">Understanding the Logical Volume Manager (LVM)</span></span></a></div></footer><script defer src="https://comentario.workaround.org/comentario.js"></script><comentario-comments no-fonts="true" id="comments"></comentario-comments><div class="myfooter">This guide is maintained by <a href="mailto:ispmail@christoph-haas.de">Christoph Haas</a> since 2003. All content on workaround.org can be used under the terms of the<a href="https://creativecommons.org/licenses/by-nc-sa/4.0/" target="_blank">Creative Commons BY-NC-SA license</a>. Penguin image based on AI art because I suck at drawing.</div></footer></div></div></main></div></div></div></div></body></html>