From ae71a2172b83dc86d4a388bf6b27e0aca1ff414e Mon Sep 17 00:00:00 2001
From: ginnoir <ginnoir@users.noreply.github.com>
Date: Sun, 5 Jul 2026 04:08:11 -0500
Subject: [PATCH] fix(caddy): imgstudio proxy with working TLS for Mac ComfyUI
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Use imgstudio.ginnoir.com instead of comfyui.* — the ACME challenge FQDN
embeds a false .com that breaks Cloudflare DNS-01. Add per-site resolvers
1.1.1.1 to bypass LAN split-DNS during cert issuance.
---
 Caddyfile              | 8 +++++++-
 bookmarks-domains.html | 2 +-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/Caddyfile b/Caddyfile
index 0283b49..b58997e 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -401,8 +401,14 @@ webui.ginnoir.com {
 
 # ComfyUI node editor — inference runs on the Mac at 192.168.1.121 (Metal/MPS).
 # LAN/tailnet only; no Authentik (WebSocket queue/progress breaks under forward_auth).
-comfyui.ginnoir.com {
+# Hostname imgstudio (not comfyui): _acme-challenge.comfyui.ginnoir.com embeds a
+# false ".com" that breaks Cloudflare DNS-01 zone lookup.
+imgstudio.ginnoir.com {
 	import internal_only
+	tls {
+		dns cloudflare {env.CF_API_TOKEN}
+		resolvers 1.1.1.1
+	}
 	reverse_proxy 192.168.1.121:8188
 }
 
diff --git a/bookmarks-domains.html b/bookmarks-domains.html
index 0a85caa..a712440 100644
--- a/bookmarks-domains.html
+++ b/bookmarks-domains.html
@@ -86,7 +86,7 @@
             <DT><A HREF="https://homarr.ginnoir.com">homarr [internal]</A>
             <DT><A HREF="https://hermes.ginnoir.com">hermes</A>
             <DT><A HREF="https://webui.ginnoir.com">webui [internal]</A>
-            <DT><A HREF="https://comfyui.ginnoir.com">comfyui [internal]</A>
+            <DT><A HREF="https://imgstudio.ginnoir.com">imgstudio [internal]</A>
             <DT><A HREF="https://backup.ginnoir.com">backup</A>
             <DT><A HREF="https://router.ginnoir.com">router [internal]</A>
         </DL><p>