Browser (Firefox) auto-upgrades to HTTPS on .io domains. Without a cert, Traefik accepted the TCP connection on :443 but couldn't do TLS handshake, causing a blank page. - Generate 10-year self-signed wildcard cert for *.homelab.fhirworx.io - Mount certs into Traefik container - Add TLS routers (websecure entrypoint) mirroring all HTTP routers - Add traefik/dynamic/tls.yml with default certificate store Import ~/homelab-ca.crt into Firefox: Settings → Privacy → Certificates → Authorities → Import → Trust for websites.