35 lines
1.0 KiB
Bash
35 lines
1.0 KiB
Bash
|
if [[ "$(whoami)" != "root" ]]
|
||
|
|
then
|
||
|
|
echo "use sudo"
|
||
|
|
exit
|
||
|
|
fi
|
||
|
|
while true; do
|
||
|
|
read -p "Do you want to install with icap? (Yy/Nn) " yn
|
||
|
|
case $yn in
|
||
|
|
[Yy]* ) read -p "Enter server ip: " serv
|
||
|
|
echo "icap_enable on icap_service service_req reqmod_precache bypass=1 icap://$serv/request adaptation_access service_req allow all icap_send_client_ip on icap_send_client_username on"\
|
||
|
|
>>squid.conf
|
||
|
|
break;;
|
||
|
|
[Nn]* ) break;;
|
||
|
|
* ) echo "Please answer Y/y or N/n.";;
|
||
|
|
esac
|
||
|
|
done
|
||
|
|
apt-get update -y > /dev/null
|
||
|
|
dpkg -i *.deb > /dev/null
|
||
|
|
apt install -f -y
|
||
|
|
dpkg -i *.deb > /dev/null
|
||
|
|
rm /etc/squid/squid.conf
|
||
|
|
cp squid.conf /etc/squid/squid.conf
|
||
|
|
openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 -keyout /etc/squid/squid.pem -out /etc/squid/squid.pem
|
||
|
|
chown proxy:proxy /etc/squid/squid.pem
|
||
|
|
chmod 640 /etc/squid/squid.pem
|
||
|
|
openssl x509 -outform der -in /etc/squid/squid.pem -out /etc/squid/squid.crt
|
||
|
|
/usr/lib/squid/security_file_certgen -c -s /var/lib/ssl_db -M 4MB
|
||
|
|
chown proxy:proxy -R /var/lib/ssl_db
|
||
|
|
squid -k reconfigure
|
||
|
|
systemctl restart squid
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|