themis.apexflo.ai {
	# Auto Let's Encrypt TLS for the subdomain (needs the DNS A record + ports 80/443 open).
	# uvicorn listens only on 127.0.0.1:8000; Caddy is the public edge.
	reverse_proxy 127.0.0.1:8000 {
		flush_interval -1   # stream SSE (search_stream / deep_search_stream) without buffering
	}
	encode gzip
	request_body {
		max_size 5MB
	}
}