diff --git a/config/Caddyfile b/config/Caddyfile
index 47d114c0..7078047b 100644
--- a/config/Caddyfile
+++ b/config/Caddyfile
@@ -1,14 +1,19 @@
 # TFM aInventory - Caddy Patched IP Configuration
-# Version 1.9.13 - Bare Metal Proxy (No on_demand)
+# Version 1.9.14 - Protocol Lock & Debug Mode
 
 {
     admin off
-    auto_https disable_redirects
+    # Enable debug logging for SSL handshake diagnostics
+    debug
+    
+    # Trust local CA for internal certificate issuance
     local_certs
+    # Avoid errors if the user isn't root (though inside Docker we usually are)
+    skip_install_trust
 }
 
-# Frontend SSL Proxy (8919 -> 443)
-:443 {
+# Explicit Frontend SSL Proxy (8919 -> 443)
+https://:443 {
     tls internal
     reverse_proxy frontend:3000
     
@@ -22,8 +27,8 @@
     }
 }
 
-# Backend SSL Proxy (8918 -> 444)
-:444 {
+# Explicit Backend SSL Proxy (8918 -> 444)
+https://:444 {
     tls internal
     reverse_proxy backend:8000
 }
diff --git a/frontend/VERSION.json b/frontend/VERSION.json
index 25952fba..18e22d1f 100644
--- a/frontend/VERSION.json
+++ b/frontend/VERSION.json
@@ -1 +1 @@
-{"version": "1.9.12", "last_build": "2026-04-13-2225", "codename": "SecureSeal", "commit": "ee7e7b7b"}
+{"version": "1.9.13", "last_build": "2026-04-13-2231", "codename": "BareMetal", "commit": "4dc0ce50"}