[peter-gribanov]

Closes #95

The documentation suggested using the source URL option to go through a proxy, but that option is the address of the database, not of the proxy — hence the confusion in the issue. This adds a real proxy option and fixes the misleading sentence.

gpslab_geoip:
    license: 'XXXXXXXXXXXXXXXX'
    edition: 'GeoLite2-City'
    proxy: 'http://user:password@proxy.example.com:3128'

The http, https, socks4, socks4a, socks5 and socks5h schemes are accepted. Credentials can be a part of the address and are url decoded.

How it works

Filesystem::copy() opens the source with the default stream context, so no transport option can be handed to it. The downloader now fetches the archive itself:

• with cURL when the extension is installed — it is the only way to reach a SOCKS proxy, to authenticate against a proxy with anything other than Basic, and to download at all when allow_url_fopen is disabled;
• with PHP streams otherwise — HTTP proxies only, Basic authentication only. A SOCKS proxy given to this path is rejected with an explicit error rather than silently ignored.

ext-curl is not a new requirement, it goes to suggest. This mirrors how splitbrain/php-archive is already handled in the downloader: use the better tool when it is there, fall back otherwise. So the bundle keeps working down to Symfony 2.8 and PHP 7.2 with no new dependency.

Backward compatibility

• the Downloader interface is untouched;
• MaxMindDownloader gets the proxy as an optional fourth constructor argument;
• the new config option has no default, so the processed configuration is unchanged when it is not set.

The one behaviour change: the archive is no longer fetched through Filesystem::copy(). Filesystem is still used for every filesystem operation, and failures still raise its IOException.

Tests

195 tests (was 165), both download paths covered:

• the cURL path runs against a real proxy started in a separate process. It answers the first request with a 407 challenge, so the test proves that curl sends the absolute URI in the request line and retries with Proxy-Authorization — and that the downloaded archive is intact.
• the streams path uses a stream wrapper that captures the context the archive is opened with, asserting the proxy address, the transport translation and the header.

Verified locally on the stacks the CI matrix resolves: PHP 7.2 + Symfony 2.8, PHP 8.0 + Symfony 5.2, PHP 8.3 + Symfony 7.4 and PHP 8.5 + Symfony 8.1 — tests and PHPStan green on all of them, PHP CS Fixer clean.

🤖 Generated with Claude Code