diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-02 23:08:58 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-02 23:08:58 +0900 |
| commit | 1a7b5adf8484ec0f2b6feb350b578142e186ab26 (patch) | |
| tree | e8c670ac5554d2b17b491ee96e9717f4432d64a9 /proxy/squid.conf | |
| parent | 88be3b3f503d4674d764a7265edb2d4e380ae738 (diff) | |
Move forward proxy from Squid to Caddy (port 80/443)
Replace standalone Squid container with caddy-forwardproxy plugin so the
proxy shares Caddy's existing ports and TLS. HTTP on :80 and HTTPS on :443.
Auth is read from the same vpn/users.conf at Caddy startup via entrypoint.sh.
DNS: add proxy to setup-route53.py WEB_SUBDOMAINS.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'proxy/squid.conf')
| -rw-r--r-- | proxy/squid.conf | 21 |
1 files changed, 0 insertions, 21 deletions
diff --git a/proxy/squid.conf b/proxy/squid.conf deleted file mode 100644 index 29ebd05..0000000 --- a/proxy/squid.conf +++ /dev/null @@ -1,21 +0,0 @@ -https_port 8443 cert=/etc/squid/certs/server.crt key=/etc/squid/certs/server.key - -auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd -auth_param basic realm "Proxy" -auth_param basic credentialsttl 2 hours - -acl authenticated proxy_auth REQUIRED -http_access allow authenticated -http_access deny all - -forwarded_for delete -via off - -dns_nameservers 1.1.1.1 8.8.8.8 - -cache_dir null /tmp -cache deny all -access_log stdio:/dev/stdout -cache_log stdio:/dev/stderr -cache_store_log none -coredump_dir /tmp |