# Mount below an existing TLS-enabled server block.
# The Python control plane intentionally listens on loopback only.
location /canger-node/ {
    proxy_pass http://127.0.0.1:8787/;
    proxy_http_version 1.1;
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto https;
    proxy_read_timeout 45s;
    client_max_body_size 512k;
}