feat: add explicit HTTP proxy support for AUR requests

Add Proxy and NoProxy configuration options for paru's HTTP requests
to the AUR. This addresses issues where automatic proxy detection via
environment variables (HTTP_PROXY/HTTPS_PROXY) fails with reqwest.

Supported proxy schemes: http://, https://, socks5://

This only affects paru's direct HTTP requests (RPC queries,
packages.gz, PKGBUILDs). Git clone/fetch operations and pacman
downloads use their respective separate proxy configuration.

Closes #1473

Signed-off-by: Josephine Pfeiffer <hi@josie.lol>

Author: pfeifferj

man/paru.8

@@ -302,6 +302,17 @@ Set an alternative AUR URL.
 .B \-\-aurrpcurl
 Set an alternative URL for the AUR /rpc endpoint.
 
+.TP
+.B \-\-proxy <url>
+Override proxy for paru's HTTP requests to the AUR. Supports http://,
+https://, and socks5:// schemes. Paru respects standard proxy environment
+variables by default; this option overrides them. Does not affect git or pacman.
+
+.TP
+.B \-\-noproxy <hosts>
+Comma-separated list of hosts to bypass the proxy. Only applies when --proxy
+is set.
+
 .TP
 .B \-\-clonedir <dir>
 Directory used to download and run PKGBUILDs.

man/paru.conf.5

@@ -8,7 +8,7 @@ paru.conf \- paru configuration file
 $PARU_CONF, $XDG_CONFIG_HOME/paru/paru.conf, $HOME/.config/paru/paru.conf, /etc/paru.conf
 
 .SH DESCRIPTION
-Paru's config file. Based on the format used by 
+Paru's config file. Based on the format used by
 .BR pacman.conf (5)
 
 Paru first attempts to read the file at $PARU_CONF. If $PARU_CONF is not
@@ -178,7 +178,7 @@ during builds allowing an option to be chosen then.
 .TP
 .B UpgradeMenu
 Show a detailed list of updates in a similar format to pacman's VerbosePkgLists
-option. (See 
+option. (See
 .BR pacman.conf(5)).
 Upgrades can be skipped using numbers, number ranges, or repo
 names.
@@ -196,6 +196,28 @@ Set an alternative AUR URL.
 .B AurRpcUrl = URL
 Set an alternative URL for the AUR /rpc endpoint.
 
+.TP
+.B Proxy = URL
+Set an explicit proxy URL for paru's HTTP requests to the AUR (RPC queries,
+package lists, PKGBUILDs). Supports http://, https://, and socks5:// schemes.
+.sp
+Paru automatically respects the standard proxy environment variables
+(HTTP_PROXY, HTTPS_PROXY, ALL_PROXY, NO_PROXY). This option is only needed if
+you want to override the environment or use a different proxy specifically
+for AUR requests.
+.sp
+This does \fBnot\fR affect git operations (cloning/fetching AUR repos) or
+pacman downloads. Git and pacman also respect standard proxy environment
+variables. For git-specific configuration, use \fBgit config --global
+http.proxy\fR.
+
+.TP
+.B NoProxy = hosts
+Comma-separated list of hosts to bypass the proxy. Only applies when Proxy is
+set. Supports IP addresses, CIDR notation (e.g., 192.168.1.0/24), domain names,
+and wildcards.
+Example: localhost,127.0.0.1,.local
+
 .TP
 .B CloneDir = /path/to/dir
 Directory used to download and run PKGBUILDs.
@@ -208,7 +230,7 @@ visible here: https://aur.archlinux.org/packages/
 
 .TP
 .B SearchBy = <name|name-desc|maintainer|depends|checkdepends|makedepends|optdepends>
-Defaults to name-desc. Search AUR packages according to the options in 
+Defaults to name-desc. Search AUR packages according to the options in
 "Search by" visible here: https://aur.archlinux.org/packages/
 
 .TP

src/command_line.rs

@@ -173,6 +173,8 @@ impl Config {
             Arg::Long("version") | Arg::Short('V') => self.version = true,
             Arg::Long("aururl") => self.aur_url = Url::parse(value?)?,
             Arg::Long("aurrpcurl") => self.aur_rpc_url = Some(Url::parse(value?)?),
+            Arg::Long("proxy") => self.proxy = Some(value?.to_string()),
+            Arg::Long("noproxy") => self.no_proxy = Some(value?.to_string()),
             Arg::Long("makepkg") => self.makepkg_bin = value?.to_string(),
             Arg::Long("pacman") => self.pacman_bin = value?.to_string(),
             Arg::Long("pacman-conf") => self.pacman_conf_bin = Some(value?.to_string()),
@@ -395,6 +397,8 @@ fn takes_value(arg: Arg) -> TakesValue {
     match arg {
         Arg::Long("aururl") => TakesValue::Required,
         Arg::Long("aurrpcurl") => TakesValue::Required,
+        Arg::Long("proxy") => TakesValue::Required,
+        Arg::Long("noproxy") => TakesValue::Required,
         Arg::Long("editor") => TakesValue::Required,
         Arg::Long("makepkg") => TakesValue::Required,
         Arg::Long("pacman") => TakesValue::Required,

src/completion.rs

@@ -12,9 +12,11 @@ use reqwest::get;
 use tr::tr;
 use url::Url;
 
-async fn save_aur_list(aur_url: &Url, cache_dir: &Path) -> Result<()> {
+async fn save_aur_list(client: &reqwest::Client, aur_url: &Url, cache_dir: &Path) -> Result<()> {
     let url = aur_url.join("packages.gz")?;
-    let resp = get(url.clone())
+    let resp = client
+        .get(url.clone())
+        .send()
         .await
         .with_context(|| format!("get {}", url))?;
     let success = resp.status().is_success();
@@ -42,7 +44,12 @@ async fn save_aur_list(aur_url: &Url, cache_dir: &Path) -> Result<()> {
     Ok(())
 }
 
-pub async fn update_aur_cache(aur_url: &Url, cache_dir: &Path, timeout: Option<u64>) -> Result<()> {
+pub async fn update_aur_cache(
+    client: &reqwest::Client,
+    aur_url: &Url,
+    cache_dir: &Path,
+    timeout: Option<u64>,
+) -> Result<()> {
     let path = cache_dir.join("packages.aur");
     let metadata = metadata(&path);
 
@@ -71,14 +78,15 @@ pub async fn update_aur_cache(aur_url: &Url, cache_dir: &Path, timeout: Option<u
     };
 
     if need_refresh {
-        save_aur_list(aur_url, cache_dir).await?;
+        save_aur_list(client, aur_url, cache_dir).await?;
     }
 
     Ok(())
 }
 
 async fn aur_list<W: Write>(config: &Config, w: &mut W, timeout: Option<u64>) -> Result<()> {
-    update_aur_cache(&config.aur_url, &config.cache_dir, timeout)
+    let client = config.raur.client();
+    update_aur_cache(&client, &config.aur_url, &config.cache_dir, timeout)
         .await
         .context(tr!("could not update aur cache"))?;
     let path = config.cache_dir.join("packages.aur");

src/config.rs

@@ -409,6 +409,8 @@ pub struct Config {
     pub aur_rpc_url: Option<Url>,
     #[default(Url::parse("https://archlinux.org").unwrap())]
     pub arch_url: Url,
+    pub proxy: Option<String>,
+    pub no_proxy: Option<String>,
     pub build_dir: PathBuf,
     pub cache_dir: PathBuf,
     pub state_dir: PathBuf,
@@ -728,10 +730,20 @@ impl Config {
             use std::time::Duration;
 
             let ver = option_env!("PARU_VERSION").unwrap_or(env!("CARGO_PKG_VERSION"));
-            let client = reqwest::Client::builder()
+            let mut builder = reqwest::Client::builder()
                 .tcp_keepalive(Duration::new(15, 0))
-                .user_agent(format!("paru/{}", ver))
-                .build()?;
+                .user_agent(format!("paru/{}", ver));
+
+            if let Some(ref proxy_url) = self.proxy {
+                let mut proxy = reqwest::Proxy::all(proxy_url)
+                    .with_context(|| format!("invalid proxy URL: {}", proxy_url))?;
+                if let Some(ref no_proxy) = self.no_proxy {
+                    proxy = proxy.no_proxy(reqwest::NoProxy::from_string(no_proxy));
+                }
+                builder = builder.proxy(proxy);
+            }
+
+            let client = builder.build()?;
 
             let rpc_url = match &self.aur_rpc_url {
                 Some(rpc) => rpc.to_string(),
@@ -1108,6 +1120,8 @@ then initialise it with:
             }
             "AurUrl" => self.aur_url = value?.parse()?,
             "AurRpcUrl" => self.aur_rpc_url = Some(value?.parse()?),
+            "Proxy" => self.proxy = Some(value?.to_string()),
+            "NoProxy" => self.no_proxy = Some(value?.to_string()),
             "BuildDir" | "CloneDir" => self.build_dir = PathBuf::from(value?),
             "Redownload" => self.redownload = ConfigEnum::from_str(key, value?.as_str())?,
             "Rebuild" => self.rebuild = ConfigEnum::from_str(key, value?.as_str())?,

src/help.rs

@@ -38,6 +38,8 @@ pub fn help() {
     );
     printtr!("    --aururl    <url>      Set an alternative AUR URL");
     printtr!("    --aurrpcur  <url>      Set an alternative URL for the AUR /rpc endpoint");
+    printtr!("    --proxy     <url>      Set HTTP proxy for AUR requests");
+    printtr!("    --noproxy   <list>     Comma-separated hosts to bypass proxy");
     printtr!("    --clonedir  <dir>      Directory used to download and run PKGBUILDs");
     println!();
     printtr!("    --makepkg   <file>     makepkg command to use");

src/install.rs

@@ -1801,12 +1801,13 @@ pub fn review(config: &Config, fetch: &aur_fetch::Fetch, pkgs: &[&str]) -> Resul
 }
 
 fn update_aur_list(config: &Config) {
+    let client = config.raur.client().clone();
     let url = config.aur_url.clone();
     let dir = config.cache_dir.clone();
     let interval = config.completion_interval;
 
     tokio::spawn(async move {
-        let _ = update_aur_cache(&url, &dir, Some(interval)).await;
+        let _ = update_aur_cache(&client, &url, &dir, Some(interval)).await;
     });
 }
 

src/search.rs

@@ -12,7 +12,6 @@ use flate2::read::GzDecoder;
 use indicatif::HumanBytes;
 use raur::{Raur, SearchBy};
 use regex::RegexSet;
-use reqwest::get;
 use srcinfo::Srcinfo;
 use tr::tr;
 
@@ -167,7 +166,10 @@ async fn search_target(config: &Config, targets: &mut Vec<String>) -> Result<Vec
 
 async fn search_aur_regex(config: &Config, targets: &[String]) -> Result<Vec<raur::Package>> {
     let url = config.aur_url.join("packages.gz")?;
-    let resp = get(url.clone())
+    let client = config.raur.client();
+    let resp = client
+        .get(url.clone())
+        .send()
         .await
         .with_context(|| format!("get {}", url))?;
     let success = resp.status().is_success();