stack
/
squid
1
0
Fork 0
Code Issues Pull Requests 1 Releases Wiki Activity

.
continuous-integration/drone/push Build is failing Details

This commit is contained in:
Giles Bradshaw 2020-08-06 15:34:23 +01:00
parent 7ebc172cd9
commit 5d4a391c2d
1 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
docker-compose.yml
View File

@ -11,8 +11,8 @@ services:
environment: environment:
- MITM_PROXY=yes - MITM_PROXY=yes
- HTTP_PORT=3128 - HTTP_PORT=3128
- MITM_CERT=/local-mitm.crt - MITM_CERT=/run/secrets/ca-crt
- MITM_KEY=/local-mitm.pem - MITM_KEY=/run/secrets/ca-key
- VISIBLE_HOSTNAME=git.local-domain - VISIBLE_HOSTNAME=git.local-domain
- EXTRA_CONFIG1=tls_outgoing_options capath=/etc/ssl/certs \ - EXTRA_CONFIG1=tls_outgoing_options capath=/etc/ssl/certs \
options=NO_SSLv3,NO_TLSv1 \ options=NO_SSLv3,NO_TLSv1 \
@ -22,12 +22,12 @@ services:
#ALL:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS \ #ALL:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS \
- EXTRA_CONFIG2=sslproxy_cipher ECDHE+ECDSA+AESGCM:ECDHE+RSA+AESGCM:EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM #:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS - EXTRA_CONFIG2=sslproxy_cipher ECDHE+ECDSA+AESGCM:ECDHE+RSA+AESGCM:EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM #:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS
# - CONFIG_DISABLE=yes # - CONFIG_DISABLE=yes
volumes: #volumes:
#- ./squid-4/squid.intercept.conf:/etc/squid4/squid.conf #- ./squid-4/squid.intercept.conf:/etc/squid4/squid.conf
# - squid-cache:/apps/squid/var/cache/squid # - squid-cache:/apps/squid/var/cache/squid
#- ./squid.intercept.conf:/etc/squid/squid.conf #- ./squid.intercept.conf:/etc/squid/squid.conf
- ./myCA/CA_crt.pem:/local-mitm.crt:ro #- ./myCA/CA_crt.pem:/local-mitm.crt:ro
- ./myCA/CA_key.pem:/local-mitm.pem:ro #- ./myCA/CA_key.pem:/local-mitm.pem:ro
ports: ports:
- 3128:3128 - 3128:3128
networks: networks:
@ -58,3 +58,9 @@ networks:
externalnet: externalnet:
driver: overlay driver: overlay
external: true external: true
secrets:
'ca-crt':
file: .secrets/ca/crt
'ca-key':
file: .secrets/ca.key