docs: reverse proxy setup for Nginx Proxy Manager and Caddy

[imonroe]

Summary

Closes #74. Homelabbers and VPS users running the Docker Compose stack need a TLS-terminating reverse proxy in front of the app to expose it safely over HTTPS. This adds a dedicated "Putting it behind a reverse proxy (HTTPS)" section to the User Guide with copy-paste setups for the two most common choices.

What's added

• New User Guide section between Deploying with Docker Compose and Deploying to CapRover, with TOC entries.
• The three things that matter for this app specifically, called out up front:
  • Set PUBLIC_BASE_URL to the public HTTPS URL (no trailing slash) — OAuth metadata and the MCP resource URI derive from it.
  • Disable response buffering + use a long read timeout, because /mcp uses Streamable HTTP and a buffering/short-timeout proxy makes MCP appear to hang.
  • Forward Host / X-Forwarded-Proto.
• Nginx Proxy Manager — optional Compose service, full Proxy Host walkthrough (Details/SSL/Advanced), including the proxy_buffering off + timeout snippet.
• Caddy — optional Compose service + a two-line Caddyfile with flush_interval -1 and read_timeout 1h.
• A "Verifying the proxy" subsection (curl /healthz and /mcp).
• A note to not publish Qdrant, only the app's port 8000.
• Cross-links: updated the existing Docker Compose "HTTPS and public access" note to point here, and added a Troubleshooting row for "MCP hangs through a reverse proxy."

Docs-only change; no code touched.

https://claude.ai/code/session_019Au99TckVV2QvC6nvED2az

---

Generated by Claude Code