configure stackhpc env for basic auth squid

Author: sjpb

environments/.stackhpc/inventory/group_vars/all/proxy.yml

@@ -1,6 +1,6 @@
 # DO NOT MERGE:
-# proxy is steveb-dev on sussex-slurm-data: can't use common default, that's hostname which isn't in /etc/hosts
-# TODO: actually need to add username:password@ in here ...
-# TODO: maybe add some quotes to this?
-proxy_http_proxy: "http://{{ hostvars[groups['squid'] | first].ansible_host }}:{{ squid_http_port }}"
+# proxy is steveb-dev on sussex-slurm-data
+proxy_basic_user: rocky
+proxy_basic_password: "{{ vault_proxy_basic_password }}"
+proxy_http_address: "{{ hostvars[groups['squid'] | first].ansible_host }}"
 proxy_plays_only: true

environments/.stackhpc/inventory/group_vars/all/squid.yml

@@ -1,3 +1,9 @@
 # DO NOT COMMIT:
 squid_cache_disk: 1024 # MB
-squid_cache_mem: "50 MB"
+squid_cache_mem: "50 MB"
+squid_acls:
+  - acl ncsa_users proxy_auth REQUIRED
+squid_auth_param: |
+    auth_param basic program /usr/lib64/squid/basic_ncsa_auth /etc/squid/passwords
+    auth_param basic children 5
+    auth_param basic credentialsttl 1 minute