From 34498a4d3ec0811eac65c247201225d79f6fae82 Mon Sep 17 00:00:00 2001
From: Codex <codex@local>
Date: Wed, 22 Jul 2026 02:06:43 -0700
Subject: [PATCH] feat: add HK Arcane-managed web stack

---
 servers/bwh-hk-dc3/web/Caddyfile    | 19 ++++++++++++++++
 servers/bwh-hk-dc3/web/README.md    |  7 ++++++
 servers/bwh-hk-dc3/web/compose.yaml | 35 +++++++++++++++++++++++++++++
 3 files changed, 61 insertions(+)
 create mode 100644 servers/bwh-hk-dc3/web/Caddyfile
 create mode 100644 servers/bwh-hk-dc3/web/README.md
 create mode 100644 servers/bwh-hk-dc3/web/compose.yaml

diff --git a/servers/bwh-hk-dc3/web/Caddyfile b/servers/bwh-hk-dc3/web/Caddyfile
new file mode 100644
index 0000000..c300b05
--- /dev/null
+++ b/servers/bwh-hk-dc3/web/Caddyfile
@@ -0,0 +1,19 @@
+rules.kais.cloud {
+    root * /srv/web
+    reverse_proxy filebrowser:80
+}
+
+dav.kais.cloud {
+    root * /srv/web
+    reverse_proxy webdav:80
+}
+
+share.kais.cloud {
+    root * /srv/share
+    encode zstd gzip
+    file_server browse
+}
+
+api.opfo.xyz {
+    reverse_proxy 100.100.130.66:1049
+}
diff --git a/servers/bwh-hk-dc3/web/README.md b/servers/bwh-hk-dc3/web/README.md
new file mode 100644
index 0000000..e06d549
--- /dev/null
+++ b/servers/bwh-hk-dc3/web/README.md
@@ -0,0 +1,7 @@
+# HK Web Services
+
+- Arcane 项目名：`web-managed`
+- 复用旧项目 `/opt/stacks/web` 下的持久化数据。
+- Secret 仅存 Arcane `.env`：`WEBDAV_PASSWORD`。
+- 切换前先停止旧 `/opt/stacks/web/compose.yaml`，再启动本项目。
+- `metacubexd` 与 `metube` 不迁移。
diff --git a/servers/bwh-hk-dc3/web/compose.yaml b/servers/bwh-hk-dc3/web/compose.yaml
new file mode 100644
index 0000000..1b93f26
--- /dev/null
+++ b/servers/bwh-hk-dc3/web/compose.yaml
@@ -0,0 +1,35 @@
+services:
+  caddy:
+    image: caddy:2.10.2
+    container_name: caddy
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+      - "443:443/udp"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - /opt/stacks/web/caddy/site:/srv
+      - /opt/stacks/web/caddy/data:/data
+      - /opt/stacks/web/caddy/config:/config
+
+  filebrowser:
+    image: filebrowser/filebrowser:s6
+    container_name: filebrowser
+    restart: unless-stopped
+    environment:
+      PUID: 65534
+      PGID: 65534
+    volumes:
+      - /opt/stacks/web/filebrowser/database:/database
+      - /opt/stacks/web/filebrowser/config:/config
+      - /opt/stacks/web/filebrowser/storage:/srv/web
+
+  webdav:
+    image: jinlife/docker-cwebdav
+    restart: always
+    environment:
+      USERNAME: dav
+      PASSWORD: ${WEBDAV_PASSWORD}
+    volumes:
+      - /opt/stacks/web/dav:/media