init: fork of kejilion/sh with certbot host-network fix

- Replace 'docker run -p 80:80' with '--network host' for certbot standalone HTTP-01 to avoid timeout in environments where Docker NAT port-publish breaks LE inbound traffic but host port 80 is reachable.
- Applies to kejilion.sh (all locale variants) and auto_cert_renewal.sh.
- README install command points to this Gitea mirror.

nginx.local

@@ -0,0 +1,62 @@
+[fail2ban-nginx-cc]
+
+enabled = true
+filter = fail2ban-nginx-cc
+chain = DOCKER-USER
+port = http,https
+action = cloudflare
+logpath = /home/web/log/nginx/access.log
+maxretry = 3
+bantime = 3600
+findtime = 3600
+ignoreip = 192.168.0.1/24
+
+
+
+[nginx-http-auth]
+
+enabled = true
+chain = DOCKER-USER
+mode = fallback
+port = http,https
+logpath = /home/web/log/nginx/error.log
+
+
+
+[nginx-limit-req]
+
+enabled = true
+chain = DOCKER-USER
+port    = http,https
+action = cloudflare
+logpath = /home/web/log/nginx/error.log
+
+
+
+[nginx-botsearch]
+
+enabled = true
+chain = DOCKER-USER
+port     = http,https
+action = cloudflare
+logpath = /home/web/log/nginx/error.log
+
+
+
+[nginx-bad-request]
+
+enabled = true
+chain = DOCKER-USER
+port    = http,https
+action = cloudflare
+logpath = /home/web/log/nginx/access.log
+
+
+
+[php-url-fopen]
+
+enabled = true
+chain = DOCKER-USER
+port    = http,https
+action = cloudflare
+logpath = /home/web/log/nginx/access.log