The server's real host name tier 1 is different from its vanity name.
The configuration consists of static resolv.conf files and static interface definitions. The proxy IP and port are added to /etc/environment so services that do HTTP/FTP can reach the web. The base file for resolvconf is gets nameservice using the same interface as the proxy since the router provides these services to the host. The /etc/interfaces file has has the static assignments to activate networking.
Application configuration comes next. Postfix is told to receive mail as the vanity domain azcrumpty.dyndns.org while the apt package manager is told to use the proxy. Squid Proxy server is configured to listen on port 80 which is HTTP in plaintext, connect to its peer on tier 2, and ensure ACLs are permissible.
/etc/environment
PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games"
http_proxy="http://[2001:470:f379:31::1]:3128"
https_proxy="http://[2001:470:f379:31::1]:3128"
ftp_proxy="http://[2001:470:f379:31::1]:3128"
/etc/resolv.conf
nameserver 2001:470:f379:31::1
domain chickenkiller.com
search chickenkiller.com
/etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
#iface eth0 inet dhcp
# This is an autoconfigured IPv6 interface
auto eth0
iface eth0 inet6 static
address 2001:470:f379:31::10
netmask 64
gateway 2001:470:f379:31::1
/etc/postfix/main.cf
mydestination = tier1.CHICKENKILLER.COM, tier1, azcrumpty.dyndns.org, localhost.localdomain, localhost
Apt Proxy Configuration
/etc/squid3/squid.conf
...
http_port 80 accel defaultsite=azcrumpty.dyndns.org
...
cache_peer fd01:470:f379:32::20 parent 80 0 no-query originserver name=myAccel
...
acl our_sites dstdomain azcrumpty.dyndns.org
http_access allow our_sites
cache_peer_access myAccel allow our_sites
cache_peer_access myAccel deny all
...
Previous: Firewall Rules | Next: Tier 2 Web Application |