feat: deploy zopu single-node production

deploy/zopu-runtime/caddy/Caddyfile

@@ -17,10 +17,28 @@
 #     reverse_proxy localhost:3583
 # }
 #
-# --- Public deployment with automatic TLS (only if needed) ---
+# --- Public deployment through Cloudflare Tunnel ---
 #
-# agent.example.invalid {
-#     reverse_proxy localhost:3583
+# Cloudflare terminates TLS and forwards these hosts to Caddy over loopback.
+#
+# http://zopu.sai-onchain.me {
+#     bind 127.0.0.1
+#     reverse_proxy 127.0.0.1:13100
+# }
+#
+# http://zopu-api.sai-onchain.me {
+#     bind 127.0.0.1
+#     reverse_proxy 127.0.0.1:3210
+# }
+#
+# http://zopu-site.sai-onchain.me {
+#     bind 127.0.0.1
+#     reverse_proxy 127.0.0.1:3211
+# }
+#
+# http://zopu-agent.sai-onchain.me {
+#     bind 127.0.0.1
+#     reverse_proxy 127.0.0.1:3583
 # }
 
 # Default: do not ship an active Caddyfile. The file is documentation.

deploy/zopu-runtime/caddy/Caddyfile.production

@@ -0,0 +1,25 @@
+{
+	admin 127.0.0.1:2019
+	auto_https off
+	http_port 8080
+}
+
+http://zopu.sai-onchain.me {
+	bind 127.0.0.1
+	reverse_proxy 127.0.0.1:13100
+}
+
+http://zopu-api.sai-onchain.me {
+	bind 127.0.0.1
+	reverse_proxy 127.0.0.1:3210
+}
+
+http://zopu-site.sai-onchain.me {
+	bind 127.0.0.1
+	reverse_proxy 127.0.0.1:3211
+}
+
+http://zopu-agent.sai-onchain.me {
+	bind 127.0.0.1
+	reverse_proxy 127.0.0.1:3583
+}