global
    log stdout format raw local0
    maxconn 4096

defaults
    log global
    mode tcp
    option tcplog
    timeout connect 5s
    timeout client 24h
    timeout server 24h

frontend tls_443
    bind 0.0.0.0:8443
    tcp-request inspect-delay 5s
    tcp-request content accept if { req.ssl_hello_type 1 }

    acl sni_anytls req.ssl_sni -i cmi-tls-a7f29c.opfo.xyz
    acl sni_trojan req.ssl_sni -i conn.opfo.xyz

    use_backend singbox_anytls if sni_anytls
    use_backend singbox_trojan if sni_trojan
    default_backend caddy_https

backend singbox_anytls
    server anytls host.docker.internal:28443

backend singbox_trojan
    server trojan host.docker.internal:32700

backend caddy_https
    server caddy caddy:443