kert 2bdbdc11b4 fix(proxy): enforce sandbox — proxy_net internal, cf-proxy dual-homed ...

Before this change HTTPS_PROXY was a polite recommendation, not a
boundary: proxy_net was a regular bridge with NAT, so anything inside
the claude container could open a direct socket to the internet and
silently bypass squid's allowlist.

Now proxy_net is internal (no NAT, no outbound). cf-proxy joins a
second bridge egress_net to dial the Cloudflare edge. claude stays on
proxy_net only, so its only route off-host is through cf-proxy →
CF Access → tunnel → squid → allowlisted CONNECTs.

Verified: from a sibling container on proxy_net, curl https://1.1.1.1
fails immediately ("Could not connect to server"); the same container
through cf-proxy gets HTTP 401 from api.anthropic.com (the smoke-test
success code).

2026-05-19 10:31:05 -04:00

..

.env.example

feat(proxy): containerized Claude Code client on isolated bridge

2026-05-19 08:15:47 -04:00

compose.yml

fix(proxy): enforce sandbox — proxy_net internal, cf-proxy dual-homed

2026-05-19 10:31:05 -04:00

Dockerfile

feat(proxy): containerized Claude Code client on isolated bridge

2026-05-19 08:15:47 -04:00