diff --git a/infra/traefik/dynamic/apps.yaml b/infra/traefik/dynamic/apps.yaml
index 11afed3..955290f 100644
--- a/infra/traefik/dynamic/apps.yaml
+++ b/infra/traefik/dynamic/apps.yaml
@@ -27,7 +27,7 @@ http:
         - websecure
       tls: {}
       middlewares:
-        - common-chain@file
+        - llm-chain@file
       service: llm-api-service
 
     # ── Tools (Document Scanner & Media Processing) ──
diff --git a/infra/traefik/dynamic/middlewares.yaml b/infra/traefik/dynamic/middlewares.yaml
index 6aa29e2..868c311 100644
--- a/infra/traefik/dynamic/middlewares.yaml
+++ b/infra/traefik/dynamic/middlewares.yaml
@@ -61,6 +61,14 @@ http:
             - "^/wp-login\\.php"
             - "^/config\\.php"
 
+    # ── LLM Stream Chain (no buffer/compress — SSE needs real-time) ──
+    llm-chain:
+      chain:
+        middlewares:
+          - secure-headers
+          - retry
+          - rate-limit
+
     # ── Common Chain ──
     common-chain:
       chain: