diff --git a/dankclaw/Caddyfile b/dankclaw/Caddyfile
index 14b619e..81733ea 100644
--- a/dankclaw/Caddyfile
+++ b/dankclaw/Caddyfile
@@ -16,6 +16,11 @@
 	email admin@franksdank.cloud
 }
 
+# --- Bare-IP access (health checks, convenience) ---
+:80 {
+	redir http://dankclaw.franksdank.cloud/ 302
+}
+
 # --- Homepage (password protected) ---
 http://dankclaw.franksdank.cloud {
 	basicauth {
diff --git a/dankclaw/dnsmasq/dnsmasq.container b/dankclaw/dnsmasq/dnsmasq.container
index 7d8b751..857e05e 100644
--- a/dankclaw/dnsmasq/dnsmasq.container
+++ b/dankclaw/dnsmasq/dnsmasq.container
@@ -10,7 +10,8 @@
 # configured -> 192.168.0.143), so no client needs per-device config.
 #
 # Runs on slirp4netns with port 53 published to the LAN (the same pattern as
-# open-webui). Config mounts from /opt/dnsmasq. See docs/Infrastructure/LAN-DNS.md.
+# open-webui). Config mounts from /home/dank/Containers/dnsmasq. See
+# docs/Infrastructure/LAN-DNS.md.
 
 [Unit]
 Description=dnsmasq LAN DNS container
@@ -22,8 +23,8 @@ Network=slirp4netns
 Image=localhost/dnsmasq:latest
 PublishPort=53:53/tcp
 PublishPort=53:53/udp
-Volume=/opt/dnsmasq/dnsmasq.conf:/etc/dnsmasq.conf:ro
-Volume=/opt/dnsmasq/addn-hosts:/etc/dnsmasq/addn-hosts:ro
+Volume=/home/dank/Containers/dnsmasq/dnsmasq.conf:/etc/dnsmasq.conf:ro
+Volume=/home/dank/Containers/dnsmasq/addn-hosts:/etc/dnsmasq/addn-hosts:ro
 
 [Service]
 Restart=always
diff --git a/dankserver/Caddyfile b/dankserver/Caddyfile
index a42123f..3b032a9 100644
--- a/dankserver/Caddyfile
+++ b/dankserver/Caddyfile
@@ -15,6 +15,11 @@
 	email admin@franksdank.cloud
 }
 
+# --- Bare-IP access (health checks, convenience) ---
+:80 {
+	redir http://dankserver.franksdank.cloud/ 302
+}
+
 # --- Homepage (password protected) ---
 http://dankserver.franksdank.cloud {
 	basicauth {