From 6338be3b300cc0311aba9eaacb85ac6fcb5e1ede Mon Sep 17 00:00:00 2001 From: Susana Ferreira Date: Tue, 10 Feb 2026 10:45:26 +0000 Subject: [PATCH] chore: remove aibridgeproxyd README (#22027) This README was unintentionally reintroduced during a Graphite stack merge. It was removed in commit 910edbc2c6c0c63579016cbc19faac37f43f4120 on #21296, but upstack PR #21390 still had the old branch state with the file, so it got merged back in. This PR removes the file. The up-to-date documentation for AI Bridge Proxy can be found in https://github.com/coder/coder/tree/main/docs/ai-coder/ai-bridge/ai-bridge-proxy --- enterprise/aibridgeproxyd/README.md | 77 ----------------------------- 1 file changed, 77 deletions(-) delete mode 100644 enterprise/aibridgeproxyd/README.md diff --git a/enterprise/aibridgeproxyd/README.md b/enterprise/aibridgeproxyd/README.md deleted file mode 100644 index 7b9bcf5bc2..0000000000 --- a/enterprise/aibridgeproxyd/README.md +++ /dev/null @@ -1,77 +0,0 @@ -# AI Bridge Proxy - -A MITM (Man-in-the-Middle) proxy server for intercepting and decrypting HTTPS requests to AI providers. - -## Overview - -The AI Bridge Proxy intercepts HTTPS traffic, decrypts it using a configured CA certificate, and forwards requests to AI Bridge for processing. - -## Configuration - -### Certificate Setup - -Generate a CA key pair for MITM: - -#### 1. Generate a new private key - -```sh -openssl genrsa -out mitm.key 2048 -chmod 400 mitm.key -``` - -#### 2. Create a self-signed CA certificate - -```sh -openssl req -new -x509 -days 365 \ - -key mitm.key \ - -out mitm.crt \ - -subj "/CN=Coder AI Bridge Proxy CA" -``` - -### Configuration options - -| Environment Variable | Description | Default | -|------------------------------------|---------------------------------|---------| -| `CODER_AIBRIDGE_PROXY_ENABLED` | Enable the AI Bridge Proxy | `false` | -| `CODER_AIBRIDGE_PROXY_LISTEN_ADDR` | Address the proxy listens on | `:8888` | -| `CODER_AIBRIDGE_PROXY_CERT_FILE` | Path to the CA certificate file | - | -| `CODER_AIBRIDGE_PROXY_KEY_FILE` | Path to the CA private key file | - | - -### Client Configuration - -Clients must trust the proxy's CA certificate and authenticate with their Coder session token. - -#### CA Certificate - -Clients need to trust the MITM CA certificate: - -```sh -# Node.js -export NODE_EXTRA_CA_CERTS="/path/to/mitm.crt" - -# Python (requests, httpx) -export REQUESTS_CA_BUNDLE="/path/to/mitm.crt" -export SSL_CERT_FILE="/path/to/mitm.crt" - -# Go -export SSL_CERT_FILE="/path/to/mitm.crt" -``` - -#### Proxy Authentication - -Clients authenticate with the proxy using their Coder session token in the `Proxy-Authorization` header via HTTP Basic Auth. -The token is passed as the password (username is ignored): - -```sh -export HTTP_PROXY="http://ignored:@:" -export HTTPS_PROXY="http://ignored:@:" -``` - -For example: - -```sh -export HTTP_PROXY="http://coder:${CODER_SESSION_TOKEN}@localhost:8888" -export HTTPS_PROXY="http://coder:${CODER_SESSION_TOKEN}@localhost:8888" -``` - -Most HTTP clients and AI SDKs will automatically use these environment variables.