Complete Ansible playbook for router/proxy/filter based on Rocky Linux

Hi,

I’ve been spending the last couple weeks on a little project that’s nearing completion. A routerboard with Rocky Linux 8 acting as a router/proxy with Dnsmasq, Squid, SquidGuard and SquidAnalyzer. In a local network it acts as the following:

  • DNS+DHCP server
  • Transparent proxy for HTTP/HTTPS
  • Proxy filter with blacklists/whitelists
  • Web usage monitor

We’ve been using this setup in our local school since the early days of CentOS 7, so it’s been quite some time. Except so far setup has been done manually. Now everything is fully automated, and it works nicely.

I’ve put everything in a public GitLab repository (well, except a handful of encrypted variables for the sensible stuff).

I’m grateful for feedback, suggestions, bug reports, etc.

Cheers,

Niki

4 Likes