diff --git a/Caddyfile b/Caddyfile
index bb4877d..8be470c 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -157,8 +157,12 @@ photos-new.hubris.network {
 	}
 	encode zstd gzip
 	# PhotoPrism API + OIDC callback first (matched before Vite catch-all)
-	@pp path /api/v1/* /api/v1 /static/* /library/* /share/*
+	@pp path /api/v1/* /api/v1 /static/* /share/*
 	reverse_proxy @pp 192.168.8.181:2342
+	# PhotoPrism redirects to /library/browse after OIDC. Bounce
+	# back to the SvelteKit UI; mule-image is the only frontend.
+	redir /library /  302
+	redir /library/* / 302
 	# Sidecar (mule-sidecar Go service) — keeps the /api/sidecar/ prefix
 	@sc path /api/sidecar/*
 	reverse_proxy @sc 192.168.8.181:8000