From 88be3b3f503d4674d764a7265edb2d4e380ae738 Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Thu, 2 Jul 2026 22:58:56 +0900
Subject: Add HTTPS forward proxy service (Squid on port 8443)

- proxy/: Squid container with HTTPS port, Basic auth from vpn/users.conf
- caddy/Caddyfile: add proxy.yyamashita.com block (RSA cert for compat)
- git/hooks: add proxy/deploy.sh to post-receive hook
- CLAUDE.md: document proxy setup and client config

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 caddy/Caddyfile | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'caddy')

diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index 952d039..5ab87a7 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -41,6 +41,13 @@ blog.yyamashita.com {
     reverse_proxy microblog-app:3000
 }
 
+proxy.yyamashita.com {
+    tls {
+        key_type rsa4096
+    }
+    respond "Proxy Server" 200
+}
+
 vpn.yyamashita.com {
     tls {
         key_type rsa4096
-- 
cgit v1.2.3