From f427ebb5b15c916a65f2192c50cc1193e5a8bffc Mon Sep 17 00:00:00 2001 From: germondai Date: Wed, 22 Jul 2026 23:13:16 +0200 Subject: [PATCH] docs(env): document MITM_PROXY_HOST default + loopback override --- .env.example | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/.env.example b/.env.example index b0c4bad..64f2c31 100644 --- a/.env.example +++ b/.env.example @@ -10,9 +10,9 @@ PORT_DOCS=3001 # --- MITM forward-proxy mode (optional, off by default) --- # # Browser-backed HTTP(S) forward proxy. Point a client's proxy setting at it and every -# request it makes is transparently re-issued through the browser pool — for clients like -# Prowlarr that only consume cookies+UA from /v1 and then re-fetch themselves, which fails -# on sites whose Cloudflare clearance is bound to the browser's connection fingerprint. +# request it makes is transparently re-issued through the browser pool — for clients that +# only consume cookies+UA from /v1 and then re-fetch themselves, which fails on sites +# whose Cloudflare clearance is bound to the browser's connection fingerprint. # # It terminates TLS with its own CA (persisted in MITM_PROXY_CA_DIR). Install that CA # (GET /proxy-ca.crt, or the ca.crt file) into the client's trust store, then set the @@ -20,7 +20,10 @@ PORT_DOCS=3001 # clients on a private interface — it can impersonate any host to a client that trusts it. MITM_PROXY_ENABLED=false MITM_PROXY_PORT=8192 -MITM_PROXY_HOST=127.0.0.1 +# Default 0.0.0.0 (binding all interfaces) — needed for docker-compose where clients +# reach trawl through the bridge network. Set to 127.0.0.1 for loopback-only +# deployment. +MITM_PROXY_HOST=0.0.0.0 MITM_PROXY_CA_DIR=/data/proxy-ca # Cap the escalation tier the proxy uses (e.g. 3 to keep it off residential Tier 4). Blank = up to 4. MITM_PROXY_MAX_TIER=