# Replace the hostname with one you control. Configure DNS and network access
# for Caddy's HTTPS certificate provisioning. Run Caddy beside the bridge.
ssh.example.com {
    reverse_proxy 127.0.0.1:8787
}
# Never proxy the separate local administrator listener on port 8788.
# Proxy the whole origin: MCP, discovery and OAuth must all be reachable.
