feat(phase1-2): finish macmini base setup, lock agy route to SG Azure, and start Lucky container

stacks/azure-edge/Caddyfile

@@ -0,0 +1,16 @@
+# ==============================================================================
+# Azure 2C4G (104.43.105.243 / sea.961504.xyz) 云边协同反向代理配置
+# 前提：Azure 与家里 Mac mini 已通过 Tailscale 组网连通（将 <MAC_MINI_TAILSCALE_IP> 替换为实际 Tailscale IP）
+# ==============================================================================
+
+# 1. 外部断网哨兵监控面板 (Uptime Kuma)
+status.961504.xyz {
+    encode zstd gzip
+    reverse_proxy 127.0.0.1:3001
+}
+
+# 2. 家庭导航/服务免端口 443 反代示例（通过 Tailscale 加密隧道回源到家里 Mac mini）
+# home.961504.xyz {
+#     encode zstd gzip
+#     reverse_proxy <MAC_MINI_TAILSCALE_IP>:16601
+# }

stacks/azure-edge/docker-compose.yml

@@ -0,0 +1,23 @@
+services:
+  uptime-kuma:
+    image: louislam/uptime-kuma:1
+    container_name: uptime-kuma
+    restart: always
+    ports:
+      - "127.0.0.1:3001:3001"
+    volumes:
+      - ./uptime-kuma-data:/app/data
+    environment:
+      - TZ=Asia/Shanghai
+
+  caddy:
+    image: caddy:2-alpine
+    container_name: caddy-edge
+    restart: always
+    network_mode: host
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - ./caddy_data:/data
+      - ./caddy_config:/config
+    environment:
+      - TZ=Asia/Shanghai

stacks/lucky/docker-compose.yml

@@ -0,0 +1,15 @@
+services:
+  lucky:
+    image: gdy666/lucky:latest
+    container_name: lucky
+    restart: always
+    # 在 macOS (OrbStack) 下，使用端口映射暴露管理端口与统一反代端口
+    ports:
+      - "16601:16601/tcp"   # Lucky Web 管理后台端口 (仅内网或配置安全入口后访问)
+      - "10443:10443/tcp"   # 家宽公网统一 HTTPS 反向代理入口端口 (TCP)
+      - "10443:10443/udp"   # HTTP/3 QUIC 支持 (UDP)
+    volumes:
+      - ./goodluck:/goodluck
+      - /etc/localtime:/etc/localtime:ro
+    environment:
+      - TZ=Asia/Shanghai