Neither the reverse proxy nor a production Next server logs requests, so "is the device on TLS?" was not answerable without a packet capture — and the capture then produced nothing, because tcpdump buffers its output and a handful of SYN lines never filled the buffer. One line per wake, naming the scheme and saying so plainly when the panel is being served in clear. At a two-hour refresh that is a dozen lines a day, and it turns a question that cost an evening into a grep. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012cSY9pVhZmJUKNN7wf1Myd