Add reverse proxy masking and Cloudflare panel SSL via DNS-01.

Introduce Caddy-based reverse proxy with decoy site and DPI masking, plus automatic Let's Encrypt certificate issuance for the panel through Cloudflare API without binding port 443.

Co-authored-by: Cursor <cursoragent@cursor.com>

docker-compose.yml

@@ -0,0 +1,24 @@
+version: '3.8'
+
+services:
+  amnezia_panel:
+    image: prvtpro/amnezia-panel:1.4.4
+    container_name: amnezia_panel
+
+    ports:
+      - "${APP_PORT:-5000}:5000"
+
+    volumes:
+      - amnezia_data:/app/data
+
+    restart: unless-stopped
+
+    healthcheck:
+      test: ["CMD-SHELL", "python3 -c \"import socket; s=socket.socket(); s.connect(('localhost', 5000)); s.close()\""]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+
+volumes:
+  amnezia_data: