caddy.json

{
  "apps": {
    "tls": {
      "certificates": {
        "automate": [
          "{env.DOMAIN}"
        ]
      }
    },
    "layer4": {
      "servers": {
        "socks": {
          "listen": [
            ":9050"
          ],
          "routes": [
            {
              "match": [
                {
                  "socks5": {}
                }
              ],
              "handle": [
                {
                  "handler": "socks5"
                }
              ]
            }
          ]
        },
        "signal_proxy": {
          "listen": [
            ":443"
          ],
          "routes": [
            {
              "handle": [
                {
                  "handler": "tls"
                }
              ]
            },
            {
              "match": [
                {
                  "tls": {
                    "sni": [
                      "chat.signal.org",
                      "ud-chat.signal.org",
                      "textsecure-service.whispersystems.org",
                      "storage.signal.org",
                      "cdn.signal.org",
                      "cdn2.signal.org",
                      "api.directory.signal.org",
                      "cdsi.signal.org",
                      "contentproxy.signal.org",
                      "uptime.signal.org",
                      "api.backup.signal.org",
                      "sfu.voip.signal.org",
                      "updates.signal.org",
                      "updates2.signal.org"
                    ]
                  }
                }
              ],
              "handle": [
                {
                  "handler": "proxy",
                  "upstreams": [
                    {
                      "dial": [
                        "{l4.tls.server_name}:443"
                      ]
                    }
                  ]
                }
              ]
            }
          ]
        }
      }
    }
  }
}