docker-claude/proxy
docker-claude 51e7ab2b08
All checks were successful
Build images / check-docker (push) Successful in 3s
Build images / build-and-push (push) Successful in 5m16s
fix(proxy): close port-6443 allowlist bypass in squid ACLs
The kubectl_api ACL allowed CONNECT tunnels to any host on port 6443,
bypassing the domain allowlist entirely. Remove it and require cluster
hostnames to be added explicitly to allowed_sites instead.

Also remove the localhost and .local entries — these aren't needed for
Claude Code or the configured MCP servers.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-16 10:07:22 +02:00
..
Dockerfile refactor(docker): migrate both images to Alpine 2026-04-14 22:40:57 +02:00
squid.conf fix(proxy): close port-6443 allowlist bypass in squid ACLs 2026-04-16 10:07:22 +02:00