From 88be3b3f503d4674d764a7265edb2d4e380ae738 Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Thu, 2 Jul 2026 22:58:56 +0900
Subject: Add HTTPS forward proxy service (Squid on port 8443)

- proxy/: Squid container with HTTPS port, Basic auth from vpn/users.conf
- caddy/Caddyfile: add proxy.yyamashita.com block (RSA cert for compat)
- git/hooks: add proxy/deploy.sh to post-receive hook
- CLAUDE.md: document proxy setup and client config

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 proxy/entrypoint.sh | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 proxy/entrypoint.sh

(limited to 'proxy/entrypoint.sh')

diff --git a/proxy/entrypoint.sh b/proxy/entrypoint.sh
new file mode 100644
index 0000000..b7cc6e2
--- /dev/null
+++ b/proxy/entrypoint.sh
@@ -0,0 +1,13 @@
+#!/bin/sh
+set -e
+
+# VPN と共有の users.conf から basic auth passwd ファイルを生成
+> /etc/squid/passwd
+while IFS=' ' read -r user pass || [ -n "$user" ]; do
+    [ -z "$user" ] && continue
+    case "$user" in \#*) continue ;; esac
+    echo "${user}:$(openssl passwd -apr1 "$pass")" >> /etc/squid/passwd
+done < /etc/proxy/users.conf
+chmod 600 /etc/squid/passwd
+
+exec squid -N -f /etc/squid/squid.conf
-- 
cgit v1.2.3