Nginx & SSL

Reverse proxying, TLS termination, and edge controls for production.

Nginx is the recommended public edge for DragonClaw.

It handles HTTPS, request buffering, and edge rate limiting before traffic reaches the gateway.

Why put Nginx in front

• TLS termination

• Public hostname routing

• Payload size limits

• IP-based rate limiting

• Cleaner separation between internet traffic and the agent runtime

Recommended pattern

• Expose Nginx publicly

• Proxy only to 127.0.0.1:18789

• Keep /health open if you need external monitoring

• Keep all other endpoints protected with a gateway token