fbi-proxy 1.15.0 → 1.17.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +17 -4
- package/dist/cli.js +9619 -1772
- package/package.json +4 -1
- package/release/fbi-proxy-linux-arm64 +0 -0
- package/release/fbi-proxy-linux-x64 +0 -0
- package/release/fbi-proxy-macos-arm64 +0 -0
- package/release/fbi-proxy-macos-x64 +0 -0
- package/release/fbi-proxy-windows-arm64.exe +0 -0
- package/release/fbi-proxy-windows-x64.exe +0 -0
- package/rs/fbi-proxy.rs +648 -120
- package/rs/lib.rs +1 -0
- package/rs/routes.rs +226 -31
- package/rs/tls.rs +243 -0
- package/ts/adminClient.ts +124 -0
- package/ts/auth/authConfig.ts +19 -1
- package/ts/cli.ts +158 -2
- package/ts/install-port-forward.ts +152 -0
- package/ts/routes.ts +50 -0
- package/ts/rulesCli.ts +166 -0
- package/ts/setup.ts +374 -0
package/README.md
CHANGED
|
@@ -123,16 +123,29 @@ Same shape — public wildcard apex points at _something_ — but `*.fbi.com` po
|
|
|
123
123
|
## Usage
|
|
124
124
|
|
|
125
125
|
```sh
|
|
126
|
-
#
|
|
126
|
+
# Default: one-shot setup → daemon + system-trusted cert + pf :443→:8443.
|
|
127
|
+
# Pops a single macOS auth dialog the first time, then https://fbi.com/
|
|
128
|
+
# (and *.fbi.com) just works with a green lock. Re-running is idempotent.
|
|
127
129
|
bunx fbi-proxy
|
|
128
130
|
|
|
129
|
-
#
|
|
130
|
-
bunx fbi-proxy --
|
|
131
|
+
# Custom apex (any wildcard-DNS domain that resolves to 127.0.0.1)
|
|
132
|
+
bunx fbi-proxy --domain example.dev
|
|
133
|
+
|
|
134
|
+
# Tear it all down (oxmgr daemon + pf rule + /etc/pf.conf reference + plist)
|
|
135
|
+
bunx fbi-proxy setup --uninstall
|
|
131
136
|
|
|
132
|
-
#
|
|
137
|
+
# Legacy foreground modes (no daemon, no system trust):
|
|
138
|
+
bunx fbi-proxy --with-caddy --domain example.dev # Caddy-fronted TLS
|
|
139
|
+
bunx fbi-proxy --dev # dev / Caddy-internal CA
|
|
140
|
+
bunx fbi-proxy --tls --port 443 # raw Rust TLS, foreground
|
|
141
|
+
FBI_PROXY_PORT=2432 bunx fbi-proxy # explicit non-default port
|
|
142
|
+
|
|
143
|
+
# Docker (foreground, no system integration)
|
|
133
144
|
docker run --rm --name fbi-proxy --network=host snomiao/fbi-proxy
|
|
134
145
|
```
|
|
135
146
|
|
|
147
|
+
The default does the full macOS integration: registers an [oxmgr](https://github.com/oxmgr)-managed daemon on `:8443`, writes `/etc/pf.anchors/com.snomiao.fbi-proxy` plus a `/Library/LaunchDaemons/com.snomiao.fbi-proxy-pf.plist` that re-applies the pf rule at boot, and adds the cert to the System keychain. Subsequent boots restore everything without any password prompt.
|
|
148
|
+
|
|
136
149
|
## Using with Caddy (Optional)
|
|
137
150
|
|
|
138
151
|
FBI-Proxy focuses on the core proxy functionality. For HTTPS and advanced routing, you can use Caddy as a reverse proxy:
|