feat(pr2): HTTP/2+HTTP/3 fingerprint extractors — JA4H, H2 SETTINGS, JA4-QUIC

decnet/templates/https/entrypoint.sh

@@ -43,17 +43,28 @@ if 'http/3' in versions:
 print(' '.join(tokens) if tokens else 'h1')
 ")
 
+DECNET_FP_SOCK="${DECNET_FP_SOCK:-/run/decnet/fp.sock}"
+# Remove stale socket from a previous run
+rm -f "$DECNET_FP_SOCK"
+
 cat > /etc/caddy/Caddyfile <<EOF
 {
   admin off
   servers :443 {
     protocols ${CADDY_PROTOCOLS}
+    listener_wrappers {
+      tls
+      decnet_h2fp
+    }
   }
 }
 
 :443 {
   tls ${CERT} ${KEY}
-  reverse_proxy 127.0.0.1:8080
+  route {
+    decnet_fp
+    reverse_proxy 127.0.0.1:8080
+  }
 }
 EOF