diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index dfb3c2b..7511f14 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -39,7 +39,13 @@ n8n.emsenhuber.net {
 	reverse_proxy http://10.40.20.167:5678
 }
 
-terpene.teilzeitladen.xyz {
+# Eigene Zone teilzeitladen.xyz → eigener, eng geschnittener DNS-Token
+# (CF_DNS_API_TOKEN_TEILZEITLADEN in /etc/caddy/caddy.env, chmod 600, NICHT im Repo;
+#  Zone:DNS:Edit nur fuer teilzeitladen.xyz). Global-acme_dns bleibt emsenhuber.net.
+420.teilzeitladen.xyz {
+	tls {
+		dns cloudflare {env.CF_DNS_API_TOKEN_TEILZEITLADEN}
+	}
 	reverse_proxy http://10.40.20.167:8890
 }
 
diff --git a/nautobot/tp34-caddy-cf-seed.py b/nautobot/tp34-caddy-cf-seed.py
index 54be46b..9014636 100644
--- a/nautobot/tp34-caddy-cf-seed.py
+++ b/nautobot/tp34-caddy-cf-seed.py
@@ -133,8 +133,8 @@ ROUTES = [
     ("haos",         "home-assistant",    "hass.emsenhuber.net",              "public"),
     ("n8n",          "n8n-web",           "n8n.emsenhuber.net",               "public"),
     ("gitea",        "gitea-http",        "gitea.emsenhuber.net",             "public"),
-    # terpene: kein ipam.Service in TP37 P2 → hier als Hinweis, wird separat geseedet
-    # ("macmini",    "terpene-worker",    "terpene.teilzeitladen.xyz",        "public"),
+    # 420.teilzeitladen.xyz: kein ipam.Service in TP37 P2 → hier als Hinweis, wird separat geseedet
+    # ("macmini",    "terpene-worker",    "420.teilzeitladen.xyz",            "public"),
     # Intern
     ("nautobot",     "nautobot-web",      "nautobot.bf.emsenhuber.net",       "internal"),
     ("docker",       "portainer",         "portainer.bf.emsenhuber.net",      "https-backend"),