diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-02 22:58:56 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-02 22:58:56 +0900 |
| commit | 88be3b3f503d4674d764a7265edb2d4e380ae738 (patch) | |
| tree | 0018d96f2a683f7e025327cba51c28249122f53c /proxy/squid.conf | |
| parent | 2854b063b4cea071be2e90eb059fef095c26d9a1 (diff) | |
Add HTTPS forward proxy service (Squid on port 8443)
- proxy/: Squid container with HTTPS port, Basic auth from vpn/users.conf
- caddy/Caddyfile: add proxy.yyamashita.com block (RSA cert for compat)
- git/hooks: add proxy/deploy.sh to post-receive hook
- CLAUDE.md: document proxy setup and client config
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'proxy/squid.conf')
| -rw-r--r-- | proxy/squid.conf | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/proxy/squid.conf b/proxy/squid.conf new file mode 100644 index 0000000..29ebd05 --- /dev/null +++ b/proxy/squid.conf @@ -0,0 +1,21 @@ +https_port 8443 cert=/etc/squid/certs/server.crt key=/etc/squid/certs/server.key + +auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd +auth_param basic realm "Proxy" +auth_param basic credentialsttl 2 hours + +acl authenticated proxy_auth REQUIRED +http_access allow authenticated +http_access deny all + +forwarded_for delete +via off + +dns_nameservers 1.1.1.1 8.8.8.8 + +cache_dir null /tmp +cache deny all +access_log stdio:/dev/stdout +cache_log stdio:/dev/stderr +cache_store_log none +coredump_dir /tmp |