From 4aeee9442cb14e55d1b379f8d1d4370ee78e2ca1 Mon Sep 17 00:00:00 2001
From: Raphael Dannecker <raphael.dannecker@steinbeisschule-reutlingen.de>
Date: Sun, 28 Apr 2024 17:31:16 +0200
Subject: [PATCH] Allow local squid direct internet access if parent proxy not
 available. This is important for devices that are not exclusively in the
 school network.

---
 roles/lmn_vm/templates/squid-usermode.conf.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/lmn_vm/templates/squid-usermode.conf.j2 b/roles/lmn_vm/templates/squid-usermode.conf.j2
index 586dbb1..ba1b2c7 100644
--- a/roles/lmn_vm/templates/squid-usermode.conf.j2
+++ b/roles/lmn_vm/templates/squid-usermode.conf.j2
@@ -1,7 +1,7 @@
 acl local-servers dstdomain .{{ domain }}
 cache_peer firewall.{{ domain }} parent 3128 0 no-query default login=NEGOTIATE auth-no-keytab
 never_direct deny local-servers
-never_direct allow all
+always_direct allow all
 #access_log stdio:/tmp/access.log squid
 access_log none
 cache_log /dev/null