From 16f41d6303903ffeba0d854e2b7c16e47b183e0a Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Fri, 12 Jun 2026 09:01:26 +0000
Subject: [PATCH] =?UTF-8?q?Option=20LIVEFLOW=5FTLS=3Doff=20pour=20servir?=
 =?UTF-8?q?=20en=20HTTP=20derri=C3=A8re=20un=20reverse=20proxy=20existant?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

https://claude.ai/code/session_01YHMp3EKzr4s6o8w1ygxuUe
---
 app/entrypoint.sh         | 8 ++++++++
 docker-compose.unraid.yml | 3 +++
 2 files changed, 11 insertions(+)

diff --git a/app/entrypoint.sh b/app/entrypoint.sh
index b6b31e9..8660cc6 100644
--- a/app/entrypoint.sh
+++ b/app/entrypoint.sh
@@ -8,6 +8,14 @@ CERT_DIR=${CERT_DIR:-/data/certs}
 HOST=${LIVEFLOW_HOST:-localhost}
 CERT="$CERT_DIR/cert.pem"
 KEY="$CERT_DIR/key.pem"
+
+# LIVEFLOW_TLS=off : servir en HTTP simple, pour les déploiements derrière un
+# reverse proxy (Nginx Proxy Manager, SWAG...) qui gère déjà le HTTPS.
+if [ "${LIVEFLOW_TLS:-on}" = "off" ]; then
+  echo "LIVEFLOW_TLS=off : démarrage en HTTP (TLS délégué au reverse proxy)"
+  exec uvicorn main:app --host 0.0.0.0 --port 8000
+fi
+
 mkdir -p "$CERT_DIR"
 
 case "$HOST" in
diff --git a/docker-compose.unraid.yml b/docker-compose.unraid.yml
index 4208e20..77af7a8 100644
--- a/docker-compose.unraid.yml
+++ b/docker-compose.unraid.yml
@@ -19,6 +19,9 @@ services:
     environment:
       # ← IP (ou nom d'hôte) de votre serveur Unraid, pour le certificat HTTPS
       - LIVEFLOW_HOST=192.168.1.16
+      # "off" si un reverse proxy (Nginx Proxy Manager, SWAG...) gère déjà le
+      # HTTPS : l'app sert alors du HTTP simple sur le port 8443.
+      - LIVEFLOW_TLS=on
       - ASR_BASE_URL=http://asr:8000/v1
       - ASR_MODEL=Qwen/Qwen3-ASR-1.7B
       - ASR_API_KEY=sk-local