diff --git a/Caddyfile b/Caddyfile
index 0283b49..b58997e 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -401,8 +401,14 @@ webui.ginnoir.com {
 
 # ComfyUI node editor — inference runs on the Mac at 192.168.1.121 (Metal/MPS).
 # LAN/tailnet only; no Authentik (WebSocket queue/progress breaks under forward_auth).
-comfyui.ginnoir.com {
+# Hostname imgstudio (not comfyui): _acme-challenge.comfyui.ginnoir.com embeds a
+# false ".com" that breaks Cloudflare DNS-01 zone lookup.
+imgstudio.ginnoir.com {
 	import internal_only
+	tls {
+		dns cloudflare {env.CF_API_TOKEN}
+		resolvers 1.1.1.1
+	}
 	reverse_proxy 192.168.1.121:8188
 }
 
diff --git a/bookmarks-domains.html b/bookmarks-domains.html
index 0a85caa..a712440 100644
--- a/bookmarks-domains.html
+++ b/bookmarks-domains.html
@@ -86,7 +86,7 @@
             <DT><A HREF="https://homarr.ginnoir.com">homarr [internal]</A>
             <DT><A HREF="https://hermes.ginnoir.com">hermes</A>
             <DT><A HREF="https://webui.ginnoir.com">webui [internal]</A>
-            <DT><A HREF="https://comfyui.ginnoir.com">comfyui [internal]</A>
+            <DT><A HREF="https://imgstudio.ginnoir.com">imgstudio [internal]</A>
             <DT><A HREF="https://backup.ginnoir.com">backup</A>
             <DT><A HREF="https://router.ginnoir.com">router [internal]</A>
         </DL><p>