How to enable Media Proxy?

[balki]

I didn't realize miniflux supported media proxy untill I saw this issue. Looking at the default configuration, images should be proxied. But I don't see them proxied in dev tools. E.g. Post: https://blog.cloudflare.com/bgp-route-leak-venezuela/
My config: /etc/miniflux.conf

# See https://miniflux.app/docs/configuration.html

RUN_MIGRATIONS=1

DATABASE_URL=host=/run/postgresql/ dbname=miniflux

LISTEN_ADDR=/run/miniflux-caddy/web.sock

BASE_URL=https://miniflux.▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒

WEBAUTHN=true

AUTH_PROXY_HEADER=X-WEBAUTH-USER
TRUSTED_REVERSE_PROXY_NETWORKS=127.0.0.1/32

POLLING_SCHEDULER=entry_frequency
POLLING_FREQUENCY=300

CLEANUP_ARCHIVE_READ_DAYS=-1
CLEANUP_ARCHIVE_UNREAD_DAYS=-1

# LOG_LEVEL=debug

[gab-dev-7]

Hi! The reason you aren't seeing images proxied is likely because the default behavior is HTTP-only.

By default, Miniflux sets MEDIA_PROXY_MODE=http-only. This means it only proxies images served over insecure HTTP (to prevent "Mixed Content" warnings in your browser). Since most the web (including the blog post you linked) now serves images over HTTPS, Miniflux leaves them alone and lets your browser load them directly.

To force Miniflux to proxy everything (for privacy or to avoid hotlink protection), you need to change the mode to all.

I also highly recommend generating a static MEDIA_PROXY_PRIVATE_KEY. If you don't, Miniflux generates a random one every time it restarts, which will break any images currently cached in your browser or RSS reader until you refresh the feed.

Add these two lines to your /etc/miniflux.conf:

# Proxy ALL images (SSL and non-SSL)
MEDIA_PROXY_MODE=all

# Set a permanent key so image links don't break after a server restart
# You can generate a random one with: openssl rand -base64 32
MEDIA_PROXY_PRIVATE_KEY=your_generated_secret_key_here

Hope that helps!

[balki]

That worked. Thanks!