# Caddyfile — Minimal reverse proxy for the Zopu agent service.
#
# This is OPTIONAL. The agent service does not need to be publicly exposed
# for the execution plane to function. Use Caddy only when an HTTP endpoint
# is genuinely needed (e.g., a webhook ingress from Convex site functions).
#
# In the default single-node deployment, the agent listens on localhost:3583
# and is reachable over Tailscale. Install Caddy only if you need TLS
# termination or a public ingress point.
#
# --- Private/Tailscale deployment (recommended) ---
#
# Listen only on the Tailscale interface. Replace the hostname with your
# Tailscale machine name or IP.
#
# http://zopu-runtime.tail-xxxx.ts.net {
#     reverse_proxy localhost:3583
# }
#
# --- Public deployment with automatic TLS (only if needed) ---
#
# agent.example.invalid {
#     reverse_proxy localhost:3583
# }

# Default: do not ship an active Caddyfile. The file is documentation.