Offline Cache Proxy Setup

This proxy caches content from selected websites so you can access them even when offline. Follow the steps below to configure your browser.

Cache Warmer Configuration

Automatically Warmed Websites

The following websites are automatically crawled and cached:

www.nwt.se www.krisinformation.se

Crawl Depth: 3 levels (how many links deep the crawler follows)

Refresh Interval: 30 minutes

Direct Access (No Proxy Required)

Cached Websites via HTTPS

Access cached content directly without configuring proxy settings or installing certificates:

nwt.proxy.xn--ia-fka.se krisinformation.proxy.xn--ia-fka.se

These subdomains serve cached content with valid Let's Encrypt certificates.

SSL Bump Domains

HTTPS Inspection Enabled For

The following domains have SSL/TLS inspection enabled for caching:

.nwt.sewww.nwt.se.krisinformation.sewww.krisinformation.se

All other HTTPS traffic passes through unchanged (splice mode).

Step 1: Download the CA Certificate

Download the certificate authority file that allows the proxy to cache HTTPS content:

Download CA Certificate

File: squid-proxy-ca.pem

Step 2: Install Certificate in Firefox

1Open Firefox and go to Settings

2Search for certificates in the settings search bar

3Click "View Certificates..."

4Go to the "Authorities" tab

5Click "Import..." and select the downloaded squid-proxy-ca.pem file

6Check "Trust this CA to identify websites" and click OK

Step 3: Configure Proxy in Firefox

1In Firefox Settings, search for proxy

2Click "Settings..." in the Network Settings section

3Select "Manual proxy configuration"

4Enter the following:

HTTP Proxy: localhost Port: 3128
HTTPS Proxy: localhost Port: 3128

Or check "Also use this proxy for HTTPS"

Alternative: System-wide Proxy (Linux)

Set environment variables in your shell profile (~/.bashrc or ~/.zshrc):

export http_proxy="http://localhost:3128"
export https_proxy="http://localhost:3128"
export HTTP_PROXY="http://localhost:3128"
export HTTPS_PROXY="http://localhost:3128"

Alternative: System-wide Certificate (Linux)

To trust the CA system-wide on Debian/Ubuntu:

sudo cp squid-proxy-ca.pem /usr/local/share/ca-certificates/squid-proxy-ca.crt
sudo update-ca-certificates

After this, curl will trust the proxy without -k or --cacert:

curl -I --proxy http://localhost:3128 https://www.nwt.se/

Verify It's Working

Test with curl using the downloaded CA certificate:

curl -I --proxy http://localhost:3128 --cacert squid-proxy-ca.pem https://www.nwt.se/

Or skip certificate verification with -k:

curl -k -I --proxy http://localhost:3128 https://www.nwt.se/

Look for X-Cache: HIT in the response headers to confirm caching is working.