docs(env): document MITM_PROXY_HOST default + loopback override

This commit is contained in:
germondai
2026-07-22 23:13:16 +02:00
parent 7107b2f224
commit f427ebb5b1
+7 -4
View File
@@ -10,9 +10,9 @@ PORT_DOCS=3001
# --- MITM forward-proxy mode (optional, off by default) ---
#
# Browser-backed HTTP(S) forward proxy. Point a client's proxy setting at it and every
# request it makes is transparently re-issued through the browser pool — for clients like
# Prowlarr that only consume cookies+UA from /v1 and then re-fetch themselves, which fails
# on sites whose Cloudflare clearance is bound to the browser's connection fingerprint.
# request it makes is transparently re-issued through the browser pool — for clients that
# only consume cookies+UA from /v1 and then re-fetch themselves, which fails on sites
# whose Cloudflare clearance is bound to the browser's connection fingerprint.
#
# It terminates TLS with its own CA (persisted in MITM_PROXY_CA_DIR). Install that CA
# (GET /proxy-ca.crt, or the ca.crt file) into the client's trust store, then set the
@@ -20,7 +20,10 @@ PORT_DOCS=3001
# clients on a private interface — it can impersonate any host to a client that trusts it.
MITM_PROXY_ENABLED=false
MITM_PROXY_PORT=8192
MITM_PROXY_HOST=127.0.0.1
# Default 0.0.0.0 (binding all interfaces) — needed for docker-compose where clients
# reach trawl through the bridge network. Set to 127.0.0.1 for loopback-only
# deployment.
MITM_PROXY_HOST=0.0.0.0
MITM_PROXY_CA_DIR=/data/proxy-ca
# Cap the escalation tier the proxy uses (e.g. 3 to keep it off residential Tier 4). Blank = up to 4.
MITM_PROXY_MAX_TIER=