Add two example reverse-proxy configuration files to help operators
deploy pdftract serve with TLS and authentication in front of the
no-auth pdftract server.
- docs/operations/serve-nginx-example.conf: nginx config with Basic Auth,
proxy_pass to localhost:8080, /extract and /health endpoints
- docs/operations/serve-traefik-example.yaml: Traefik dynamic config with
BasicAuth middleware, buffering limits, separate health router
Both configs include top comments explaining the deployment model:
pdftract serve binds to 127.0.0.1:8080 with no auth; the reverse
proxy provides TLS termination and authentication.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
