Add HAProxy TLS routing for HK CMI

servers/bwh-hk-cmi/snell/Dockerfile

@@ -0,0 +1,21 @@
+FROM alpine:3.24 AS downloader
+
+ARG SNELL_VERSION=5.0.1
+ARG SNELL_ZIP_SHA256=9bea1c2b9e35b73b31634856c04d18c393072b9e5dcde6a32781d8b8f908c539
+
+RUN apk add --no-cache curl unzip \
+    && curl -fsSL "https://dl.nssurge.com/snell/snell-server-v${SNELL_VERSION}-linux-amd64.zip" -o /tmp/snell.zip \
+    && echo "${SNELL_ZIP_SHA256}  /tmp/snell.zip" | sha256sum -c - \
+    && unzip -p /tmp/snell.zip snell-server > /snell-server \
+    && chmod 755 /snell-server
+
+FROM debian:bookworm-slim
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends ca-certificates libstdc++6 \
+    && rm -rf /var/lib/apt/lists/*
+COPY --from=downloader /snell-server /usr/local/bin/snell-server
+COPY entrypoint.sh /usr/local/bin/entrypoint.sh
+RUN chmod 755 /usr/local/bin/entrypoint.sh
+
+ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]