feat: add self-built Snell 5.0.1 projects

servers/bwh-hk-dc3/snell/.env.example

@@ -0,0 +1,3 @@
+PSK=change-me
+HOST_PORT=47854
+

servers/bwh-hk-dc3/snell/Dockerfile

@@ -0,0 +1,19 @@
+FROM alpine:3.21 AS downloader
+
+ARG SNELL_VERSION=5.0.1
+ARG SNELL_ZIP_SHA256=9bea1c2b9e35b73b31634856c04d18c393072b9e5dcde6a32781d8b8f908c539
+
+RUN apk add --no-cache curl unzip \
+    && curl -fsSL "https://dl.nssurge.com/snell/snell-server-v${SNELL_VERSION}-linux-amd64.zip" -o /tmp/snell.zip \
+    && echo "${SNELL_ZIP_SHA256}  /tmp/snell.zip" | sha256sum -c - \
+    && unzip -p /tmp/snell.zip snell-server > /snell-server \
+    && chmod 755 /snell-server
+
+FROM alpine:3.21
+
+RUN apk add --no-cache ca-certificates
+COPY --from=downloader /snell-server /usr/local/bin/snell-server
+COPY --chmod=755 entrypoint.sh /usr/local/bin/entrypoint.sh
+
+ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
+

servers/bwh-hk-dc3/snell/README.md

@@ -0,0 +1,5 @@
+# Snell Server
+
+- 当前锁定 Snell Server 5.0.1，由本目录 Dockerfile 从官方包构建并校验 SHA-256。
+- 客户端因禁用 QUIC 显示 `version=4` 属现有兼容用法，不改变服务端 5.0.1 部署。
+- Snell 6 与 5 不兼容。迁移时新增独立 `snell-v6` 服务、端口和 PSK，与 v5 并存；客户端迁移完成后再停 v5。

servers/bwh-hk-dc3/snell/compose.yaml

@@ -0,0 +1,20 @@
+services:
+  snell-v5:
+    build:
+      context: .
+      args:
+        SNELL_VERSION: 5.0.1
+        SNELL_ZIP_SHA256: 9bea1c2b9e35b73b31634856c04d18c393072b9e5dcde6a32781d8b8f908c539
+    image: local/snell-server:5.0.1
+    restart: unless-stopped
+    ports:
+      - "${HOST_PORT}:9102/tcp"
+    environment:
+      PSK: ${PSK}
+      PORT: 9102
+    logging:
+      driver: json-file
+      options:
+        max-size: 200k
+        max-file: "2"
+

servers/bwh-hk-dc3/snell/entrypoint.sh

@@ -0,0 +1,19 @@
+#!/bin/sh
+set -eu
+
+: "${PSK:?PSK is required}"
+: "${PORT:?PORT is required}"
+
+case "$PORT" in
+  *[!0-9]*|'') echo "PORT must be numeric" >&2; exit 1 ;;
+esac
+
+umask 077
+cat > /tmp/snell-server.conf <<EOF
+[snell-server]
+listen = :::${PORT}
+psk = ${PSK}
+EOF
+
+exec /usr/local/bin/snell-server -c /tmp/snell-server.conf
+

servers/bwh-us-dc9/snell/.env.example

@@ -0,0 +1,3 @@
+PSK=change-me
+PORT=9102
+

servers/bwh-us-dc9/snell/Dockerfile

@@ -0,0 +1,19 @@
+FROM alpine:3.21 AS downloader
+
+ARG SNELL_VERSION=5.0.1
+ARG SNELL_ZIP_SHA256=9bea1c2b9e35b73b31634856c04d18c393072b9e5dcde6a32781d8b8f908c539
+
+RUN apk add --no-cache curl unzip \
+    && curl -fsSL "https://dl.nssurge.com/snell/snell-server-v${SNELL_VERSION}-linux-amd64.zip" -o /tmp/snell.zip \
+    && echo "${SNELL_ZIP_SHA256}  /tmp/snell.zip" | sha256sum -c - \
+    && unzip -p /tmp/snell.zip snell-server > /snell-server \
+    && chmod 755 /snell-server
+
+FROM alpine:3.21
+
+RUN apk add --no-cache ca-certificates
+COPY --from=downloader /snell-server /usr/local/bin/snell-server
+COPY --chmod=755 entrypoint.sh /usr/local/bin/entrypoint.sh
+
+ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
+

servers/bwh-us-dc9/snell/README.md

@@ -0,0 +1,6 @@
+# Snell Server
+
+- 当前锁定 Snell Server 5.0.1，由本目录 Dockerfile 从官方包构建并校验 SHA-256。
+- 客户端因禁用 QUIC 显示 `version=4` 属现有兼容用法，不改变服务端 5.0.1 部署。
+- Snell 6 与 5 不兼容。迁移时新增独立 `snell-v6` 服务、端口和 PSK，与 v5 并存；客户端迁移完成后再停 v5。
+

servers/bwh-us-dc9/snell/compose.yaml

@@ -0,0 +1,19 @@
+services:
+  snell-v5:
+    build:
+      context: .
+      args:
+        SNELL_VERSION: 5.0.1
+        SNELL_ZIP_SHA256: 9bea1c2b9e35b73b31634856c04d18c393072b9e5dcde6a32781d8b8f908c539
+    image: local/snell-server:5.0.1
+    restart: unless-stopped
+    network_mode: host
+    environment:
+      PSK: ${PSK}
+      PORT: ${PORT}
+    logging:
+      driver: json-file
+      options:
+        max-size: 200k
+        max-file: "2"
+

servers/bwh-us-dc9/snell/entrypoint.sh

@@ -0,0 +1,19 @@
+#!/bin/sh
+set -eu
+
+: "${PSK:?PSK is required}"
+: "${PORT:?PORT is required}"
+
+case "$PORT" in
+  *[!0-9]*|'') echo "PORT must be numeric" >&2; exit 1 ;;
+esac
+
+umask 077
+cat > /tmp/snell-server.conf <<EOF
+[snell-server]
+listen = :::${PORT}
+psk = ${PSK}
+EOF
+
+exec /usr/local/bin/snell-server -c /tmp/snell-server.conf
+