diff --git a/config/Caddyfile b/config/Caddyfile
index cdefa387..47d114c0 100644
--- a/config/Caddyfile
+++ b/config/Caddyfile
@@ -1,19 +1,15 @@
 # TFM aInventory - Caddy Patched IP Configuration
-# Version 1.9.12 - Secure Seal & IP Stability
+# Version 1.9.13 - Bare Metal Proxy (No on_demand)
 
 {
     admin off
     auto_https disable_redirects
-    
-    # Trust local CA for internal certificate issuance
     local_certs
 }
 
 # Frontend SSL Proxy (8919 -> 443)
-https://{$SERVER_IP:192.168.84.113}:443 {
-    tls internal {
-        on_demand
-    }
+:443 {
+    tls internal
     reverse_proxy frontend:3000
     
     # Security Headers for PWA
@@ -27,9 +23,7 @@ https://{$SERVER_IP:192.168.84.113}:443 {
 }
 
 # Backend SSL Proxy (8918 -> 444)
-https://{$SERVER_IP:192.168.84.113}:444 {
-    tls internal {
-        on_demand
-    }
+:444 {
+    tls internal
     reverse_proxy backend:8000
 }
diff --git a/frontend/VERSION.json b/frontend/VERSION.json
index 7a96fb62..25952fba 100644
--- a/frontend/VERSION.json
+++ b/frontend/VERSION.json
@@ -1 +1 @@
-{"version": "1.9.11", "last_build": "2026-04-13-2215", "codename": "Convergence", "commit": "9d7e4f0c"}
+{"version": "1.9.12", "last_build": "2026-04-13-2225", "codename": "SecureSeal", "commit": "ee7e7b7b"}