diff --git a/Caddyfile b/Caddyfile
index ec4d5f7..bbacd27 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -144,33 +144,23 @@ blog.hubris.network {
 }
 
 photos.hubris.network {
-	tls {
-		dns ionos {env.IONOS_AUTH_API_TOKEN}
-	}
-	reverse_proxy 192.168.8.136:3000
-}
-
-photos-new.hubris.network {
-	# mule-image @new branch — PhotoPrism M0 test on LXC 127 (192.168.8.181)
+	# mule-image — PhotoPrism + Go sidecar + SvelteKit (post-Mulimage 2.0)
 	tls {
 		dns ionos {env.IONOS_AUTH_API_TOKEN}
 	}
 	encode zstd gzip
-	# PhotoPrism API + OIDC callback first (matched before Vite catch-all)
+	# PhotoPrism API + OIDC callback first (matched before static catch-all)
 	@pp path /api/v1/* /api/v1 /static/* /share/*
-	reverse_proxy @pp 192.168.8.181:2342
-	# PhotoPrism redirects to /library/browse after OIDC. Bounce
-	# back to the SvelteKit UI; mule-image is the only frontend.
+	reverse_proxy @pp 192.168.8.136:2342
+	# PhotoPrism redirects to /library/browse after OIDC. Bounce back to
+	# the SvelteKit SPA; mule-image is the only user-facing frontend.
 	redir /library /  302
 	redir /library/* / 302
-	# Sidecar (mule-sidecar Go service) — keeps the /api/sidecar/ prefix
+	# mule-sidecar (Go) — keeps the /api/sidecar/ prefix
 	@sc path /api/sidecar/*
-	reverse_proxy @sc 192.168.8.181:8000
-	# Catch-all → Vite dev server. Host rewritten so the catch-all reaches Vite
-	# without tripping Vite allowedHosts.
-	reverse_proxy 192.168.8.181:5173 {
-		header_up Host localhost:5173
-	}
+	reverse_proxy @sc 192.168.8.136:8000
+	# Catch-all → nginx-on-120 serving the SvelteKit static bundle (no Vite in prod)
+	reverse_proxy 192.168.8.136:3000
 }
 
 auth.hubris.network {