mirror of
https://github.com/open-webui/docs.git
synced 2026-07-22 18:45:42 -04:00
00b6886b99
Purely additive section in docs/reference/https/caddy.md for operators who run Open WebUI behind a shared reverse proxy or managed hosting without app-layer env-var access. Includes a single-layer-only warning (duplicate headers), the five unambiguous headers with an HSTS caveat, and a pointer to the hardening docs; CSP is intentionally left to the CONTENT_SECURITY_POLICY env var.