mjcurran · Oct 28, 2026 · Oct 27, 2026 · Oct 27, 2026
diff --git a/gateway/compose/production/django/start b/gateway/compose/production/django/start
@@ -35,6 +35,7 @@ function main() {
         --bind 0.0.0.0:18000 \
         --timeout 605 \
         --graceful-timeout 605 \
+        --keep-alive 95 \
         --chdir=/app -k uvicorn_worker.UvicornWorker || {
             echo_wait_and_quit "Gunicorn server failed."
         }

diff --git a/gateway/pyproject.toml b/gateway/pyproject.toml
@@ -62,7 +62,8 @@
         "uvicorn>=0.32.0",
         "uvicorn-worker>=0.2.0",
         "whitenoise>=6.7.0",
-    ]
+        "httptools>=0.9.0",
+]
 
     [project.optional-dependencies]
         local      = [

diff --git a/gateway/uv.lock b/gateway/uv.lock
diff --git a/network/traefik/conf.d/00-tls.toml b/network/traefik/conf.d/00-tls.toml
@@ -9,6 +9,7 @@
     [tls.options]
         [tls.options.default]
             minVersion = "VersionTLS12"
+            sniStrict = true
 
     [tls.stores]
         # Fallback when Let's Encrypt is unavailable (curl may need --insecure).