That's exactly what i did personnaly on my oss repo https://github.com/ysa-ai/ysa

I want to run my agents fully isolated with headless mode. To achieve that safely you have to run a proxy