---

Usage ¶

Currently tofuproxy uses: GnuTLS’es certtool, Tcl/Tk’s wish shell for GUI dialogues, dwebp, djxl, avifdec for images transcoding, multitail for logs viewing.

• Download and build it.
• Create separate state/ directory, generate tofuproxy’s certificate and create necessary FIFOs by executing state-init helper:

  $ mkdir state ; cd state
  $ ../state-init
  

• Run tofuproxy itself then. By default it will bind to [::1]:8080 and use [::1]:53 DNS server for DANE requests (set to an empty string to disable DANE lookups):

  $ ../cmd/tofuproxy/tofuproxy [-ai ecdsa] -unzstd ../cmd/zstd/unzstd
  main.go:70: listening: [::1]:8080 dns: [::1]:53 certs: ./certs ccerts: ./ccerts
  

• Trust your newly generated CA:

  # cat cert.pem >>/etc/ssl/cert.pem
  

• Point you HTTP/HTTPS clients to http://localhost:8080 proxy.
• Watch logs:

  $ ( cd fifos ; ../../fifos/multitail )