chore: 初始提交 Fonu 1.0.2

- 公网反代：Nginx 状态卡片（版本 / 运行状态 / 配置校验 / 端口监听）
- 部署设置第一、二梯队（HTTPS 开关、安全头、限流、连接数、仅中国大陆 IP）
- 隧道检测兼容 frps v0.68 / v0.71（V2 与旧版端点）
- 恢复被清空的 internal/frp/store.go、internal/api/ddns_handler.go、web/src/views/DdnsView.vue

cmd/fonu-agent/main.go

@@ -0,0 +1,51 @@
+package main
+
+import (
+	"context"
+	"flag"
+	"fmt"
+	"log"
+	"os"
+	"os/signal"
+	"syscall"
+
+	"github.com/fonu/fonu/internal/agent"
+)
+
+func main() {
+	listen := flag.String("listen", envOr("FONU_AGENT_LISTEN", ":7700"), "agent listen address")
+	token := flag.String("token", os.Getenv("FONU_AGENT_TOKEN"), "agent bearer token")
+	nginxDir := flag.String("nginx-conf-dir", envOr("FONU_AGENT_NGINX_CONF_DIR", ""), "managed nginx config directory（留空自动探测 Nginx 实际加载的 vhost 目录）")
+	certsDir := flag.String("certs-dir", envOr("FONU_AGENT_CERTS_DIR", "/var/lib/fonu-agent/certs"), "certificate directory")
+	frpsConfig := flag.String("frps-config", envOr("FONU_AGENT_FRPS_CONFIG", "/etc/frp/frps.toml"), "frps config path")
+	frpsBin := flag.String("frps-bin", envOr("FONU_AGENT_FRPS_BIN", "frps"), "frps binary")
+	dataDir := flag.String("data-dir", envOr("FONU_AGENT_DATA_DIR", "/var/lib/fonu-agent"), "agent data directory")
+	showVersion := flag.Bool("version", false, "print agent version and exit")
+	flag.Parse()
+	if *showVersion {
+		fmt.Println("fonu-agent", agent.AgentVersion)
+		return
+	}
+	if *token == "" {
+		log.Fatal("FONU_AGENT_TOKEN or -token is required")
+	}
+	server, err := agent.NewServer(agent.Config{
+		ListenAddr: *listen, Token: *token, NginxConfDir: *nginxDir,
+		CertsDir: *certsDir, FrpsConfigPath: *frpsConfig, FrpsBinary: *frpsBin, DataDir: *dataDir,
+	})
+	if err != nil {
+		log.Fatal(err)
+	}
+	ctx, stop := signal.NotifyContext(context.Background(), syscall.SIGINT, syscall.SIGTERM)
+	defer stop()
+	if err := server.ListenAndServe(ctx); err != nil && ctx.Err() == nil {
+		log.Fatal(err)
+	}
+}
+
+func envOr(key, fallback string) string {
+	if value := os.Getenv(key); value != "" {
+		return value
+	}
+	return fallback
+}

cmd/fonu/main.go

@@ -0,0 +1,54 @@
+package main
+
+import (
+	"context"
+	"embed"
+	"errors"
+	"io/fs"
+	"log"
+	"net/http"
+	"os"
+	"os/signal"
+	"syscall"
+	"time"
+
+	"github.com/fonu/fonu/internal/app"
+	"github.com/fonu/fonu/internal/config"
+)
+
+//go:embed all:web/dist
+var webDist embed.FS
+
+func main() {
+	cfg := config.Load()
+	migrationsDir, err := app.ResolveMigrationsDir()
+	if err != nil {
+		log.Fatalf("resolve migrations: %v", err)
+	}
+
+	staticFS, err := fs.Sub(webDist, "web/dist")
+	if err != nil {
+		log.Fatalf("load static files: %v", err)
+	}
+
+	application, err := app.New(cfg, staticFS, migrationsDir)
+	if err != nil {
+		log.Fatalf("start application: %v", err)
+	}
+
+	go func() {
+		if err := application.Run(); err != nil && !errors.Is(err, http.ErrServerClosed) {
+			log.Fatalf("server error: %v", err)
+		}
+	}()
+
+	stop := make(chan os.Signal, 1)
+	signal.Notify(stop, syscall.SIGINT, syscall.SIGTERM)
+	<-stop
+
+	ctx, cancel := context.WithTimeout(context.Background(), 15*time.Second)
+	defer cancel()
+	if err := application.Shutdown(ctx); err != nil {
+		log.Printf("shutdown error: %v", err)
+	}
+}