From 88be3b3f503d4674d764a7265edb2d4e380ae738 Mon Sep 17 00:00:00 2001 From: yyamashita Date: Thu, 2 Jul 2026 22:58:56 +0900 Subject: Add HTTPS forward proxy service (Squid on port 8443) - proxy/: Squid container with HTTPS port, Basic auth from vpn/users.conf - caddy/Caddyfile: add proxy.yyamashita.com block (RSA cert for compat) - git/hooks: add proxy/deploy.sh to post-receive hook - CLAUDE.md: document proxy setup and client config Co-Authored-By: Claude Sonnet 4.6 --- proxy/squid.conf | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 proxy/squid.conf (limited to 'proxy/squid.conf') diff --git a/proxy/squid.conf b/proxy/squid.conf new file mode 100644 index 0000000..29ebd05 --- /dev/null +++ b/proxy/squid.conf @@ -0,0 +1,21 @@ +https_port 8443 cert=/etc/squid/certs/server.crt key=/etc/squid/certs/server.key + +auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd +auth_param basic realm "Proxy" +auth_param basic credentialsttl 2 hours + +acl authenticated proxy_auth REQUIRED +http_access allow authenticated +http_access deny all + +forwarded_for delete +via off + +dns_nameservers 1.1.1.1 8.8.8.8 + +cache_dir null /tmp +cache deny all +access_log stdio:/dev/stdout +cache_log stdio:/dev/stderr +cache_store_log none +coredump_dir /tmp -- cgit v1.2.3