apt install -y squid-openssl
mkdir /etc/squid/ssl && cd /etc/squid/ssl/

openssl req -new -newkey rsa:2048 -sha256 -days 3650 -nodes -x509 \
-extensions v3_ca -keyout squid.pem -out squid.pem \
-subj "/C=RU/ST=KRM/L=SEV/O=NOTDEV.LTD/OU=IT/CN=proxy.notdev.local"

openssl dhparam -outform PEM -out dhparam.pem 2048 && chown -R proxy:proxy /etc/squid/ssl && chmod -R 0640 /etc/squid/ssl && openssl x509 -in squid.pem -outform DER -out squid.der && mkdir -p /var/lib/squid && rm -rf /var/lib/squid/ssl_db && /usr/lib/squid/security_file_certgen -c -s /var/lib/squid/ssl_db -M 5MB && chown -R proxy:proxy /var/lib/squid

Iptables -t nat -A PREROUTING -p tcp -m multiport --dports 80,8080 -j REDIRECT --to-ports 3129
Iptables -t nat -A PREROUTING -p tcp -m multiport --dports 443,993,465 -j REDIRECT --to-ports 3130