Welcome!
This wizard will help you configure your local network to transparently redirect all X/Twitter traffic to xcancel.com - a privacy-respecting Twitter frontend.
A privacy-respecting Twitter/X frontend that lets you view tweets, threads, and profiles without tracking, ads, or supporting X's current management.
We'll walk through:
- Choosing your web server (nginx or Caddy)
- Network configuration
- SSL certificate setup
- DNS configuration
Choose Web Server
Both options work perfectly - the difference is configuration complexity.
Caddy (Recommended)
Modern, automatic HTTPS, 4-line config vs 27 lines
nginx
Battle-tested, widely used, industry standard
Network Configuration
How should the container connect to your network?
Bridge (Simple)
Uses host's IP with port forwarding. Easier setup.
Macvlan (Dedicated IP)
Container gets its own IP on your LAN. Required for dnsmasq.
Macvlan Configuration
SSL Configuration
SSL certificates allow HTTPS interception without browser warnings.
🔥 Generate in Browser (Easiest)
Generate CA and certificates right here. No external tools needed!
mkcert (Recommended)
Automatic CA and certificate generation. 3 commands to working HTTPS.
Manual OpenSSL
Full control over certificate parameters. Advanced users.
Skip SSL (Not Recommended)
HTTP-only redirect. HTTPS links will show browser warnings.
Generating Your Certificates
Configure how your certificates will be generated. Certificates will be created automatically using your unique values.
🔑 CA Private Key Handling
Choose what happens to the CA private key after certificate generation:
🔒 Discard CA Key (Recommended)
Discard CA private key after signing. More secure, but certificates can't be renewed.
🔄 Keep CA Key
Include CA private key in download. Allows certificate renewal, but you must keep the key secure.
Certificate Parameters
These values make your certificates uniquely yours:
Manual OpenSSL Configuration
Customize your certificate parameters. We'll generate the OpenSSL commands for you to run.
Certificate Parameters
These values will be used in your OpenSSL certificates:
DNS Configuration
How will you configure DNS to point twitter.com/x.com to your proxy?
Pi-hole (Recommended)
Network-wide ad blocking with DNS override capability.
Included dnsmasq
Run a DNS server container (requires macvlan networking).
UniFi/Ubiquiti
UniFi Dream Machine or USG with custom DNS entries.
Router Built-in DNS
Use your router's DNS override features.
Manual (Hosts File)
Edit /etc/hosts on each device individually.
Upstream DNS Provider
Choose which DNS servers dnsmasq should use for non-Twitter queries.
Cloudflare (1.1.1.1)
Privacy-focused, fast, no logging
Google (8.8.8.8)
Reliable, widely used, good performance
Quad9 (9.9.9.9)
Security-focused, blocks malware domains
OpenDNS (208.67.222.222)
Content filtering options, parental controls
Docker Host IP Address
Enter the IP address of your Docker host machine for the hosts file configuration.
This IP will be used in the generated hosts file to redirect Twitter/X traffic to your xcancel proxy.
Enter the local network IP address where Docker is running (e.g., 192.168.1.100)
💡 How to find your Docker host IP:
- Linux/Mac: Run
hostname -I | awk '{print $1}'orip addr - Windows: Run
ipconfigand look for "IPv4 Address" - Any OS: Check your router's DHCP client list
Review Configuration
Review your selections and download generated configs.
Your Configuration
Configuration Generated!
Download your customized configuration files below.