[mjcurran]

• Added httptools to uv env
• Set keepalive time for gunicorn server

---

Note

Medium Risk
Changes production Gunicorn startup and Traefik TLS defaults for all gateway traffic; sniStrict can reject clients that omit or mismatch SNI.

Overview
Targets 502 Bad Gateway errors during uploads by tuning the production HTTP stack.

Gateway: Adds httptools as an explicit dependency (so Uvicorn/Gunicorn can use the faster HTTP parser) and sets Gunicorn --keep-alive 95 alongside existing 605s worker timeouts—likely so idle keep-alive stays below common reverse-proxy limits and long uploads see fewer dropped upstream connections.

Edge: Enables sniStrict = true on Traefik’s default TLS options so connections must present a matching SNI hostname.

Lockfile updates include resolving httptools and a no-op exclude-newer comment change in uv.lock.

^{Reviewed by Cursor Bugbot for commit 60ecbd4. Bugbot is set up for automated code reviews on this repo. Configure here.}

[semanticdiff-com]

Review changes with  

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want reviews to match your repository better? Bugbot Learning can learn team-specific rules from PR activity. A team admin can enable Learning in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit e0add98. Configure here.}