merge: resolve conflicts with origin/master (routes, Caddy ports, scripts)

deploy/zopu-runtime/caddy/Caddyfile

@@ -1,44 +1,15 @@
-# Caddyfile — Minimal reverse proxy for the Zopu agent service.
+# Caddyfile — Public reverse proxy for the Zopu web + API.
 #
-# This is OPTIONAL. The agent service does not need to be publicly exposed
-# for the execution plane to function. Use Caddy only when an HTTP endpoint
-# is genuinely needed (e.g., a webhook ingress from Convex site functions).
-#
-# In the default single-node deployment, the agent listens on localhost:3583
-# and is reachable over Tailscale. Install Caddy only if you need TLS
-# termination or a public ingress point.
-#
-# --- Private/Tailscale deployment (recommended) ---
-#
-# Listen only on the Tailscale interface. Replace the hostname with your
-# Tailscale machine name or IP.
-#
-# http://zopu-runtime.tail-xxxx.ts.net {
-#     reverse_proxy localhost:3583
-# }
-#
-# --- Public deployment through Cloudflare Tunnel ---
-#
-# Cloudflare terminates TLS and forwards these hosts to Caddy over loopback.
-#
-# http://zopu.sai-onchain.me {
-#     bind 127.0.0.1
-#     reverse_proxy 127.0.0.1:13100
-# }
-#
-# http://zopu-api.sai-onchain.me {
-#     bind 127.0.0.1
-#     reverse_proxy 127.0.0.1:3210
-# }
-#
-# http://zopu-site.sai-onchain.me {
-#     bind 127.0.0.1
-#     reverse_proxy 127.0.0.1:3211
-# }
-#
-# http://zopu-agent.sai-onchain.me {
-#     bind 127.0.0.1
-#     reverse_proxy 127.0.0.1:3583
-# }
+# The web frontend (port 5173) is served at the root, and the Flue agent/API
+# (port 3585) is mounted under /api so the browser talks same-origin.
 
-# Default: do not ship an active Caddyfile. The file is documentation.
+zopu.cheaptricks.puter.wtf {
+	bind 135.181.82.179 2a01:4f9:c013:4a64::1
+	encode zstd gzip
+
+	handle_path /api/* {
+		reverse_proxy 127.0.0.1:3585
+	}
+
+	reverse_proxy 127.0.0.1:5173
+}