# ADR 006: Use Caddy For Production Ingress

## Status

Accepted.

## Context

Production should expose only the demo UI under `gapido.amiirkhl.ir` with HTTPS.

## Decision

Use Caddy as the reverse proxy and TLS terminator. Route public traffic to `demo-app:8080`.

## Consequences

TLS automation is simple. Internal services remain private on Docker networking.