Add Docker containerization, VPN STUN/ICE support, and DNS whitelist tools

- Dockerfile: Containerized Asterisk PBX with Ubuntu 24.04 base,
  all dependencies pre-installed, health checks, and volume persistence
- docker-compose.yml: Asterisk service with host networking (required for
  RTP port range) + optional self-hosted coturn STUN server via --profile stun
- docker/entrypoint.sh: Auto-generates configs, certs, and starts
  Asterisk in foreground with web admin in background
- scripts/vpn-diagnostics.sh: Detects VPN interfaces, checks PJSIP
  transport config, tests STUN reachability, analyzes NAT type, and
  provides STUN/TURN recommendations for third-party VPNs
- scripts/dns-whitelist.sh: Documents all domains needed per network mode
  (LAN/VPN vs FQDN), per component (server, Sipnetic, Linphone), with
  --check mode to test DNS resolution and reachability
- easy-asterisk script: Added VPN STUN/ICE menu (option 12 in Server
  Settings) with self-hosted coturn, Google STUN, or custom STUN server
  options. LAN/VPN devices now get ice_support=yes when VPN ICE is
  enabled. Web admin Python code also respects VPN_ICE_ENABLED config.

Self-hosted coturn in STUN-only mode eliminates all external DNS
dependencies - everything operates by IP address, ideal for
DNS-filtered environments.

https://claude.ai/code/session_01Vm6NLaQuzM4VosAotqS1q8

Dockerfile

@@ -0,0 +1,86 @@
+# ================================================================
+# Easy Asterisk - Docker Container
+# Asterisk PBX with web admin and optional STUN support
+#
+# Usage:
+#   docker compose up -d                    # Asterisk only
+#   docker compose --profile stun up -d     # Asterisk + self-hosted STUN
+#   docker exec -it easy-asterisk easy-asterisk  # Interactive management
+# ================================================================
+
+FROM ubuntu:24.04
+
+ENV DEBIAN_FRONTEND=noninteractive
+ENV LANG=C.UTF-8
+
+# Install Asterisk and dependencies (matches install_asterisk_packages)
+RUN echo "exit 101" > /usr/sbin/policy-rc.d && chmod +x /usr/sbin/policy-rc.d && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends \
+        asterisk \
+        asterisk-core-sounds-en-gsm \
+        asterisk-modules \
+        openssl \
+        curl \
+        tcpdump \
+        sngrep \
+        python3 \
+        iproute2 \
+        net-tools \
+        dnsutils \
+        iputils-ping \
+        procps \
+    && rm -rf /var/lib/apt/lists/* \
+    && rm -f /usr/sbin/policy-rc.d \
+    && ldconfig \
+    && update-ca-certificates 2>/dev/null || true
+
+# Create required directories
+RUN mkdir -p \
+    /etc/easy-asterisk \
+    /etc/asterisk/certs \
+    /var/lib/asterisk/static-http \
+    /var/log/asterisk \
+    /var/spool/asterisk \
+    /var/run/asterisk \
+    && chown -R asterisk:asterisk \
+        /etc/asterisk \
+        /var/lib/asterisk \
+        /var/log/asterisk \
+        /var/spool/asterisk \
+        /var/run/asterisk
+
+# Copy the main management script
+COPY easy-asterisk-v0.10.0.sh /usr/local/bin/easy-asterisk
+RUN chmod +x /usr/local/bin/easy-asterisk
+
+# Copy diagnostic and utility scripts
+COPY scripts/vpn-diagnostics.sh /usr/local/bin/vpn-diagnostics
+COPY scripts/dns-whitelist.sh /usr/local/bin/dns-whitelist
+RUN chmod +x /usr/local/bin/vpn-diagnostics /usr/local/bin/dns-whitelist
+
+# Copy entrypoint
+COPY docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+# SIP signaling
+EXPOSE 5060/udp
+EXPOSE 5060/tcp
+EXPOSE 5061/tcp
+
+# Web admin + provisioning
+EXPOSE 8080/tcp
+EXPOSE 8088/tcp
+EXPOSE 8089/tcp
+
+# RTP media range (use --network host in production for full range)
+# Docker port-mapping 10000 ports is impractical; host networking recommended
+EXPOSE 10000-10100/udp
+
+# Persistent data
+VOLUME ["/etc/asterisk", "/etc/easy-asterisk", "/var/log/asterisk"]
+
+HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
+    CMD asterisk -rx "core show version" >/dev/null 2>&1 || exit 1
+
+ENTRYPOINT ["/entrypoint.sh"]