---

sudo systemctl stop squid 2>/dev/null; sudo apt remove --purge squid squid-openssl -y; sudo rm -rf /etc/squid /var/spool/squid /var/log/squid /var/lib/squid /run/squid.pid; sudo apt update; sudo apt install squid -y; sudo mkdir -p /etc/squid/ssl; cd /etc/squid/ssl; sudo openssl req -new -newkey rsa:2048 -days 2972 -nodes -x509 -keyout bump.key -out bump.crt -subj "/CN=squid-proxy"; sudo cat bump.key bump.crt | sudo tee bump.pem; sudo chmod 600 bump.*; sudo chown -R proxy:proxy /etc/squid/ssl; sudo tee /etc/squid/squid.conf << 'EOF'
http_port 3144 ssl-bump cert=/etc/squid/ssl/bump.pem generate-host-certificates=on
acl localnet src 192.168.12.0/24
acl step1 at_step SslBump1
ssl_bump peek step1
ssl_bump bump all
acl block_images url_regex -i \.jpg$ \.jpeg$ \.gif$ \.png$
http_access deny block_images
http_access allow localnet
http_access deny all
cache_dir ufs /var/spool/squid 100 16 256
cache_effective_user proxy
sslproxy_cert_error allow all
EOF
sudo squid -z; sudo systemctl enable squid; sudo systemctl restart squid; sleep 2; sudo systemctl status squid --no-pager; echo ""; echo "=== ПРОВЕРКА ==="; curl -x http://192.168.12.1:3144 http://yandex.ru -I 2>/dev/null | head -1; echo ""; curl -x http://192.168.12.1:3144 http://example.com/test.jpg -I 2>/dev/null | head -1