Skip to content

Latest commit

 

History

History
94 lines (70 loc) · 3.15 KB

README.md

File metadata and controls

94 lines (70 loc) · 3.15 KB
Raw

Docker Privoxy HTTPS

📃 About

Alpine docker with privoxy enabled and configured to work with HTTPS.

It also includes the script made by 'Andrwe Lord Weber' to translate adblock rules to privoxy.

The default configuration is intended for personal use only (ex. raspberry)

💡 Documentation

This image downloads the 'trustedCAs' file from curl.se and also generates the ca-bundle file. So, you only need copy the 'ca-bundle' file and install it on your browser/system.

Privoxy Status Page: https://config.privoxy.org/show-status

Env. Variables

Name Description Default
ADBLOCK_URLS String of urls separated by spaces ""
ADBLOCK_FILTERS String of filters separated by spaces ""
  • Can get urls from: https://easylist.to/
  • Can know the available filters with docker exec privoxy privoxy-blocklist --help

Docker

docker run -d --restart unless-stopped --name privoxy -p 8118:8118 -v privoxy-ca:/usr/local/etc/privoxy/CA ghtardo/docker-privoxy-https

Docker Compose

services:
  privoxy:
    image: ghtardo/docker-privoxy-https
    container_name: privoxy
    ports:
      - 8118:8118
    environment:
      - TZ=Europe/Madrid
      - ADBLOCK_URLS=https://easylist.to/easylist/easylist.txt
    volumes:
      - privoxy-ca:/usr/local/etc/privoxy/CA
    restart: unless-stopped
    hostname: "privoxy"

volumes:
    privoxy-ca:

Get ca-bundle

docker cp privoxy:/usr/local/etc/privoxy/CA/privoxy-ca-bundle.crt .

📐 Privoxy Manager Script (privman)

  • Update the Trusted CA file: docker exec privoxy privman --update-trusted-ca
  • Regenerate the .crt bundle: docker exec privoxy privman --regenerate-crt-bundle
  • Update 'adblock' filters: docker exec privoxy privman --update-adblock-filters
  • Block a domain to the blacklist: docker exec privoxy privman --add-blacklist .google. .facebook.
  • Remove a domain from the blacklist: docker exec privoxy privman --remove-blacklist .facebook.

📄 Configuration highlight changes

  • actionsfile privman-rules/user.action > Where are the privman rules (empty by default)
  • filterfile privman-rules/user.filter > Predefined privman aliases
  • buffer-limit > Increased to 25600KB (25MB)
  • keep-alive-timeout > Increased to 600 seconds
  • socket-timeout > Decreased to 5 seconds
  • max-client-connections > Increased to 512
  • listen-backlog > Set to -1 (maximum queue length allowed)
  • receive-buffer-size > Increased to 65536 bytes

🔖 Points of Interest

Container Path Description
/usr/local/etc/privoxy/ Where privoxy files are located
/usr/local/etc/privoxy/config The configuration file
/usr/local/etc/privoxy/CA Where auth. certs are located
/usr/local/etc/privoxy/certs Where privoxy stores the downloaded certificates
/var/lib/privoxy Where are the scripts related to privoxy

💻 Privoxy Compiler Options

  • --disable-toggle
  • --disable-editor
  • --disable-force
  • --with-openssl
  • --with-brotli