Some ikiwiki plugins make outgoing HTTP requests from the web server:

  • aggregate (to download Atom and RSS feeds)
  • blogspam (to check whether a comment or edit is spam)
  • openid (to authenticate users)
  • pinger (to ping other ikiwiki installations)

If your ikiwiki installation cannot contact the Internet without going through a proxy, you can configure this in the setup file by setting environment variables:

ENV:
    http_proxy: "http://proxy.example.com:8080"
    https_proxy: "http://proxy.example.com:8080"
    # optional
    no_proxy: ".example.com,www.example.org"

Note that some plugins will use the configured proxy for all destinations, even if they are listed in no_proxy.

To avoid server-side request forgery attacks, ensure that your proxy does not allow requests to addresses that are considered to be internal.