I would suggest that you put the HTTP Proxy setting on the internal network since this is where your local PCs are located. They will use the proxy for http access.
I have mine in the DMZ (as it is also my web server), but you could put it in either.
The proxy might be better protected against malicious internal users if it's in the DMZ, but it's probably negligible if you keep services on it to a minimum.