feat(caddy): expose Mac ComfyUI at comfyui.ginnoir.com

Proxy the full ComfyUI editor through valhalla for LAN/tailnet access while
inference stays on the Mac at 192.168.1.121:8188.

Caddyfile

@@ -399,6 +399,13 @@ webui.ginnoir.com {
 	reverse_proxy 172.20.0.1:8787
 }
 
+# ComfyUI node editor — inference runs on the Mac at 192.168.1.121 (Metal/MPS).
+# LAN/tailnet only; no Authentik (WebSocket queue/progress breaks under forward_auth).
+comfyui.ginnoir.com {
+	import internal_only
+	reverse_proxy 192.168.1.121:8188
+}
+
 backup.ginnoir.com {
 	route {
 		import authentik_outpost

bookmarks-domains.html

@@ -15,17 +15,16 @@
         <DT><H3>TABLETOP TOOLS (public)</H3>
         <DL><p>
             <DT><A HREF="https://5etools.ginnoir.com">5etools</A>
-            <DT><A HREF="https://pf2e.ginnoir.com">pf2e</A>
         </DL><p>
 
-        <DT><H3>FILE STORAGE — public (Authentik on admin UI; shares + WebDAV bypass) (public)</H3>
+        <DT><H3>FILE STORAGE — internal only (Nextcloud) (internal)</H3>
         <DL><p>
             <DT><A HREF="https://files.ginnoir.com">files</A>
         </DL><p>
 
         <DT><H3>STATIC SITES (public)</H3>
         <DL><p>
-            <DT><A HREF="https://ffttsystems.ginnoir.com">ffttsystems</A>
+            <DT><A HREF="https://wa4.ginnoir.com">wa4</A>
         </DL><p>
 
         <DT><H3>MEDIA REQUESTS (public)</H3>
@@ -42,17 +41,17 @@
             <DT><A HREF="https://tautulli.ginnoir.com">tautulli</A>
         </DL><p>
 
-        <DT><H3>DOWNLOAD CLIENTS (internal)</H3>
+        <DT><H3>DOWNLOAD CLIENTS</H3>
         <DL><p>
-            <DT><A HREF="https://qbittorrent.ginnoir.com">qbittorrent</A>
+            <DT><A HREF="https://qbittorrent.ginnoir.com">qbittorrent [internal]</A>
-            <DT><A HREF="https://deluge.ginnoir.com">deluge</A>
+            <DT><A HREF="https://nzbget.ginnoir.com">nzbget [internal]</A>
-            <DT><A HREF="https://nzbget.ginnoir.com">nzbget</A>
+            <DT><A HREF="https://whisparr.ginnoir.com">whisparr [internal]</A>
-            <DT><A HREF="https://whisparr.ginnoir.com">whisparr</A>
+            <DT><A HREF="https://stash.ginnoir.com">stash [internal]</A>
-            <DT><A HREF="https://stash.ginnoir.com">stash</A>
             <DT><A HREF="https://roms.ginnoir.com">roms</A>
             <DT><A HREF="https://romhacks.ginnoir.com">romhacks</A>
-            <DT><A HREF="https://jd.ginnoir.com">jd</A>
+            <DT><A HREF="https://jd.ginnoir.com">jd [internal]</A>
-            <DT><A HREF="https://romhacks-files.ginnoir.com">romhacks-files</A>
+            <DT><A HREF="https://idlegame.ginnoir.com">idlegame [internal]</A>
+            <DT><A HREF="https://romhacks-files.ginnoir.com">romhacks-files [internal]</A>
         </DL><p>
 
         <DT><H3>NOTIFICATIONS &amp; RSS — public (ntfy native auth; FreshRSS HTTP auth via Authentik) (public)</H3>
@@ -85,6 +84,9 @@
             <DT><A HREF="https://portainer.ginnoir.com">portainer</A>
             <DT><A HREF="https://uptime.ginnoir.com">uptime</A>
             <DT><A HREF="https://homarr.ginnoir.com">homarr [internal]</A>
+            <DT><A HREF="https://hermes.ginnoir.com">hermes</A>
+            <DT><A HREF="https://webui.ginnoir.com">webui [internal]</A>
+            <DT><A HREF="https://comfyui.ginnoir.com">comfyui [internal]</A>
             <DT><A HREF="https://backup.ginnoir.com">backup</A>
             <DT><A HREF="https://router.ginnoir.com">router [internal]</A>
         </DL><p>
@@ -99,6 +101,13 @@
             <DT><A HREF="https://vault.ginnoir.com">vault</A>
             <DT><A HREF="https://docs.ginnoir.com">docs [internal]</A>
             <DT><A HREF="https://plane.ginnoir.com">plane</A>
+            <DT><A HREF="https://nextcloud.ginnoir.com">nextcloud [internal]</A>
+            <DT><A HREF="https://office.ginnoir.com">office [internal]</A>
+        </DL><p>
+
+        <DT><H3>PHOTOS (internal)</H3>
+        <DL><p>
+            <DT><A HREF="https://photos.ginnoir.com">photos</A>
         </DL><p>
 
         <DT><H3>NOTES / PKM — internal only (LiveSync over LAN or tailnet) (internal)</H3>

bookmarks-ports.html

@@ -18,10 +18,7 @@
 
         <DT><H3>Dev</H3>
         <DL><p>
-            <DT><A HREF="ssh://git@valhalla:2222">gitea :2222</A>
-            <DT><A HREF="http://valhalla:3030">gitea :3030</A>
             <DT><A HREF="http://valhalla:8443">code_server</A>
-            <DT><A HREF="http://valhalla:5000">registry</A>
             <DT><A HREF="http://valhalla:4224">dbx</A>
             <DT><A HREF="http://valhalla:6875">bookstack :6875</A>
         </DL><p>
@@ -42,13 +39,12 @@
 
         <DT><H3>Media</H3>
         <DL><p>
-            <DT><A HREF="http://valhalla:8112">deluge</A>
             <DT><A HREF="http://valhalla:6789">nzbget</A>
             <DT><A HREF="http://valhalla:8989">sonarr</A>
             <DT><A HREF="http://valhalla:7878">radarr</A>
             <DT><A HREF="http://valhalla:6767">bazarr</A>
             <DT><A HREF="http://valhalla:9696">prowlarr</A>
-            <DT><A HREF="http://valhalla:5055">overseerr</A>
+            <DT><A HREF="http://valhalla:5055">seerr</A>
             <DT><A HREF="http://valhalla:8181">tautulli</A>
             <DT><A HREF="http://valhalla:3232">qbittorrent :3232</A>
             <DT><A HREF="http://valhalla:6881">qbittorrent :6881 (TCP/UDP)</A>
@@ -78,6 +74,11 @@
             <DT><A HREF="http://valhalla:8080">owncloud_server</A>
         </DL><p>
 
+        <DT><H3>Photos</H3>
+        <DL><p>
+            <DT><A HREF="http://valhalla:2283">immich-server</A>
+        </DL><p>
+
         <DT><H3>Proxy</H3>
         <DL><p>
             <DT><A HREF="http://valhalla:80">caddy :80</A>