Chapter 3. Customizing the Insights proxy With Insights proxy, you can designate additional dnf or yum servers, customize the rhproxy configuration, and use customized commands and configuration options. 3.1. Designating optional dnf and yum servers To add additional third-party servers, including non-Red Hat and non-EPEL servers, create a custom allowlist for rhproxy. Save the hostnames of systems providing dnf repositories in the following file: /home/rhproxy/.config/rhproxy/env/mirror.servers Open the /home/rhproxy/.config/rhproxy/env/mirror.servers file, and add the hostnames of any systems that provide dnf repositories. After adding your systems, restart the service: Verification step Run the following command to ensure that your third-party services were added: 3.2. Customizing the rhproxy configuration You might decide to customize your rhproxy configuration. For a list of configurable options and their descriptions, see Appendix A. Prerequisites You have at least one active Red Hat Enterprise Linux (RHEL) subscription. You have at least one system running RHEL version 9, for the Insights proxy installation. You are logged in to the system as root or have sudo permissions. Your architectural environment is either Intel or Arm. You are logged in as the new rhproxy user. Procedure Log in to the Insights proxy server. Edit the /home/rhproxy/.config/rhproxy/env/rhproxy.env file to make changes to the default configuration. Restart Insights proxy for your configuration edits to take effect: See the following for a list of allowed upstream servers: /home/rhproxy/.config/rhproxy/env/redhat.servers for RedHat Insights Servers /home/rhproxy/.config/rhproxy/env/epel.servers for Dnf/Yum EPEL Servers Important The files mentioned in this procedure get overwritten with rhproxy RPM updates, therefore, you must reapply the manual configuration updates that you make. 3.3. Unconfiguring client systems when you want to disable the Insights proxy You might decide to stop using the Insights proxy. Use the following procedure to unconfigure your client systems so that they no longer go through the Insights proxy. Prerequisites You have at least one active Red Hat Enterprise Linux (RHEL) subscription. You have at least one system running RHEL version 9, for the Insights proxy installation. You are logged in to the system as root or have sudo permissions. Your architectural environment is either Intel or Arm. Procedure Open your command-line interface, and navigate to the specific client system you want to remove from the Insights proxy. Run the following command on your client system: Verification step If the procedure is successful, you will see the following output: Un-Configuring insights-client/rhsm/rhc/rhcd from proxying to Insights 3.4. Appendix A: Command options for Insights proxy You can use the following options with the rhproxy command: Table 3.1. Command options for Insights proxy Option Description install Installs Insights proxy. uninstall [-f] Uninstalls Insights proxy. Specify -f to force remove the certifications and downloaded data. start Starts the Insights proxy. stop Stops the Insights proxy. restart Restarts Insights proxy. status Displays the status of the proxy's running service and connection logs. update If you change the default 3128 port, you will need to use this option to update the configure-client.sh script. 3.5. Appendix B: Configuration options for Insights proxy If you want to run your proxy with non-default parameters, see the following table for a list of available options that you can set in the /home/rhproxy/.config/rhproxy/env/rhproxy.env configuration file. Table 3.2. Configuration options for Insights proxy Option Description RHPROXY_DISABLE This option will disable an active proxy. This defaults to 0. RHPROXY_DEBUG_CONFIG Use this option to log environment variables and Nginx configuration upon startup. This defaults to 0. RHPROXY_SERVICE_PORT Use this option to define the listening port of the Insights proxy. This defaults to 3128. RHPROXY_DNS_SERVER Use this option to define which DNS server to use for name resolution. This defaults to 1.1.1.1. The rhproxy service will use the system DNS resolver if defined, otherwise it defaults to 1.1.1.1. RHPROXY_WEB_SERVER_DISABLE Use this option to disable the Insights proxy web server. This defaults to 0. RHPROXY_WEB_SERVER_PORT Use this option to define the listening port of the Insights proxy web server. This defaults to 8443.

Commands:
[rhproxy@server ~]USD rhproxy restart
curl -x http://USD(hostname):3128 https://<host name>
[rhpproxy@server ~]USD rhproxy restart
[root@client ~] ./configure-client.sh --unconfigure