I installed mitmproxy and started it – I then added it’s CA certificate to the ubuntu accepted CAs (copied to /usr/local/share/ca-certificates/ and added to accepted with update-ca-certificates).