chore: 初始提交 Fonu 1.0.2

- 公网反代：Nginx 状态卡片（版本 / 运行状态 / 配置校验 / 端口监听）
- 部署设置第一、二梯队（HTTPS 开关、安全头、限流、连接数、仅中国大陆 IP）
- 隧道检测兼容 frps v0.68 / v0.71（V2 与旧版端点）
- 恢复被清空的 internal/frp/store.go、internal/api/ddns_handler.go、web/src/views/DdnsView.vue

internal/frp-1.0.2/generate_test.go

@@ -0,0 +1,58 @@
+package frp
+
+import (
+	"strings"
+	"testing"
+
+	"github.com/fonu/fonu/internal/config"
+)
+
+func TestGenerateNginxGateway(t *testing.T) {
+	cfg := config.Config{
+		DataDir:               "/data",
+		NginxDefaultHTTPPort:  18080,
+		NginxDefaultHTTPSPort: 9443,
+		FrpPIDFile:            "/data/frp/frpc.pid",
+	}
+	frpCfg := Config{
+		ServerAddr:    "vps.example.com",
+		ServerPort:    7000,
+		TLSEnabled:    true,
+		CustomDomains: []string{"nas.example.com", "*.example.com"},
+	}
+	out, err := Generate(cfg, frpCfg, "secret-token", 18080, 9443)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !strings.Contains(out, `serverAddr = "vps.example.com"`) {
+		t.Fatalf("missing server addr: %s", out)
+	}
+	if !strings.Contains(out, `localPort = 18080`) {
+		t.Fatalf("missing http local port: %s", out)
+	}
+	if !strings.Contains(out, `type = "https2https"`) {
+		t.Fatalf("missing https plugin: %s", out)
+	}
+	if !strings.Contains(out, `localAddr = "127.0.0.1:9443"`) {
+		t.Fatalf("missing https local addr: %s", out)
+	}
+	if !strings.Contains(out, `transport.tls.enable = true`) {
+		t.Fatalf("missing tls enable: %s", out)
+	}
+}
+
+func TestGenerateDisablesTLSByDefault(t *testing.T) {
+	cfg := config.Config{DataDir: "/data", FrpPIDFile: "/data/frp/frpc.pid"}
+	frpCfg := Config{
+		ServerAddr:    "vps.example.com",
+		ServerPort:    7000,
+		CustomDomains: []string{"nas.example.com"},
+	}
+	out, err := Generate(cfg, frpCfg, "secret-token", 18080, 9443)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !strings.Contains(out, `transport.tls.enable = false`) {
+		t.Fatalf("expected tls disabled: %s", out)
+	}
+}