fix: Docker build supports proxy via .env configuration

- docker-compose.yml reads HTTP_PROXY and CONTAINER_PROXY from .env
- Build args pass proxy to npm/GitHub downloads inside container
- Runtime proxy uses host.docker.internal to reach host proxy
- .env.example documents all proxy settings
- No per-machine Docker daemon config needed

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.dockerignore

@@ -7,3 +7,4 @@ tmp/
 .git/
 docs/
 stitch-*/
+.env

.env.example

@@ -1,4 +1,21 @@
+# Codex Proxy environment configuration
+# Copy to .env and adjust:  cp .env.example .env
+
+# ── Authentication ──
 CODEX_JWT_TOKEN=       # Optional: paste ChatGPT JWT directly (skip OAuth)
+
+# ── Platform (for fingerprint headers) ──
 CODEX_PLATFORM=darwin  # darwin/win32/linux
 CODEX_ARCH=arm64       # arm64/x64
+
+# ── Port ──
 PORT=8080
+
+# ── Docker proxy configuration ──
+# Build-time: used during `docker compose build` for npm/GitHub access
+# HTTP_PROXY=http://host.docker.internal:7897
+# HTTPS_PROXY=http://host.docker.internal:7897
+
+# Runtime: container uses this proxy to reach chatgpt.com
+# Use host.docker.internal to reach a proxy on the Docker host
+# CONTAINER_PROXY=http://host.docker.internal:7897

Dockerfile

@@ -1,8 +1,8 @@
 FROM node:20-slim
 
-# Install unzip (full-update pipeline) and ca-certificates
+# Install unzip (full-update pipeline), curl, and ca-certificates
 RUN apt-get update && \
-    apt-get install -y --no-install-recommends unzip ca-certificates && \
+    apt-get install -y --no-install-recommends unzip curl ca-certificates && \
     rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app

docker-compose.yml

@@ -1,11 +1,26 @@
 services:
   codex-proxy:
-    build: .
+    build:
+      context: .
+      # Pass host proxy to build stage (npm install, curl downloads)
+      # Set HTTP_PROXY in .env or shell environment
+      args:
+        - HTTP_PROXY=${HTTP_PROXY:-}
+        - HTTPS_PROXY=${HTTPS_PROXY:-}
+        - NO_PROXY=${NO_PROXY:-localhost,127.0.0.1}
     ports:
-      - "8080:8080"
+      - "${PORT:-8080}:8080"
     volumes:
       - ./data:/app/data
       - ./config:/app/config
     restart: unless-stopped
     environment:
       - NODE_ENV=production
+      # Runtime proxy for upstream requests (chatgpt.com)
+      # Use host.docker.internal to reach host's proxy from container
+      - HTTP_PROXY=${CONTAINER_PROXY:-}
+      - HTTPS_PROXY=${CONTAINER_PROXY:-}
+      - NO_PROXY=localhost,127.0.0.1
+    extra_hosts:
+      # Allow container to reach host network services (proxy, etc.)
+      - "host.docker.internal:host-gateway"