Initial: Caddy + FRP Server (WSS) + Chisel Server

.gitignore

@@ -0,0 +1,4 @@
+.env
+.env.*
+!.env.enc
+!.env.*.enc

.sops.yaml

@@ -0,0 +1,3 @@
+creation_rules:
+  - path_regex: \.env.*$
+    age: "age1z8gak2l4h0vpcnhtcdxmem2u9h2n54vuksk8ys82609qtzampuvqh50wdr"

Caddyfile

@@ -0,0 +1,14 @@
+test.sascha-lutz.de {
+    reverse_proxy localhost:18097 {
+        flush_interval -1
+        transport http {
+            read_buffer 64kb
+        }
+    }
+    log {
+        output file /var/log/caddy/test.sascha-lutz.de.log {
+            roll_size 50MiB
+            roll_keep 3
+        }
+    }
+}

compose.yaml

@@ -0,0 +1,43 @@
+networks:
+  proxy_network:
+    name: test_proxy_network
+
+services:
+  caddy:
+    image: caddy:latest
+    container_name: caddy
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+      - "443:443/udp"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - /app-config/caddy/data:/data
+      - /app-config/caddy/logs:/var/log/caddy
+    networks:
+      - proxy_network
+
+  frps:
+    image: snowdreamtech/frps:0.68.0
+    container_name: frps
+    restart: unless-stopped
+    ports:
+      - "7000:7000"
+      - "18097:18097"
+      - "127.0.0.1:7500:7500"
+    volumes:
+      - ./frps.toml:/etc/frp/frps.toml:ro
+    entrypoint: ["/usr/bin/frps", "-c", "/etc/frp/frps.toml"]
+    networks:
+      - proxy_network
+
+  chisel:
+    image: jpillora/chisel:latest
+    container_name: chisel
+    restart: unless-stopped
+    ports:
+      - "8443:8443"
+    command: ["server", "--port", "8443", "--auth", "pfannkuchen:test2026", "--reverse"]
+    networks:
+      - proxy_network

frps.toml

@@ -0,0 +1,14 @@
+bindPort = 7000
+
+auth.method = "token"
+auth.token = "pfannkuchen-test-2026"
+
+webServer.addr = "0.0.0.0"
+webServer.port = 7500
+webServer.user = "admin"
+webServer.password = "test2026"
+
+transport.tcpMux = true
+
+log.to = "console"
+log.level = "info"