diff --git a/cloudflared-config.yml b/cloudflared-config.yml
index 5141ef694..1e85a1580 100644
--- a/cloudflared-config.yml
+++ b/cloudflared-config.yml
@@ -187,9 +187,6 @@ ingress:
     service: http://localhost:5050
   - hostname: manavoxel.mana.how
     service: http://localhost:5028
-  - hostname: whopxl.mana.how
-    service: http://localhost:5100
-
   # ============================================
   # Who? Game (Standalone-Bun-Stack, native auf Mac Mini unter PM2)
   # Source: ~/projects/who/, Deploy-Doc: who/docs/MAC_MINI_DEPLOY.md
diff --git a/docker-compose.macmini.yml b/docker-compose.macmini.yml
index d404a91c0..ac54f7b47 100644
--- a/docker-compose.macmini.yml
+++ b/docker-compose.macmini.yml
@@ -250,7 +250,7 @@ services:
       # Enforced by services/mana-auth/src/auth/sso-config.spec.ts.
       # All productivity modules now live under mana.how (path-based) —
       # no per-module subdomain entries required here.
-      CORS_ORIGINS: https://mana.how,https://auth.mana.how,https://whopxl.mana.how,https://cards.mana.how
+      CORS_ORIGINS: https://mana.how,https://auth.mana.how,https://cards.mana.how
     ports:
       - "3001:3001"
     healthcheck:
@@ -460,10 +460,12 @@ services:
     environment:
       TZ: Europe/Berlin
       PORT: 3018
-      # Self-hosted Photon on mana-gpu (cross-LAN). When set, registers
-      # as `photon-self` provider with privacy: 'local' — eligible for
-      # sensitive queries. Empty value = slot disabled.
-      PHOTON_SELF_API_URL: ${PHOTON_SELF_API_URL:-}
+      # Self-hosted Photon. Läuft als Docker-Container auf der GPU-Box
+      # (mana-server-gpu, WSL2). Mini-Container können die GPU-LAN-IP
+      # nicht direkt routen (Colima-NAT-Quirk), daher via Cloudflare-
+      # Tunnel — `photon.mana.how` schickt direkt an den GPU-tunnel.
+      # Empty value = slot disabled.
+      PHOTON_SELF_API_URL: ${PHOTON_SELF_API_URL:-https://photon.mana.how}
       # Cold-start cross-LAN fetches to photon-self consistently take
       # >10s on the first probe; the 8s default false-marked it unhealthy
       # on every cold path. 20s leaves headroom while still cutting off
diff --git a/docker/prometheus/prometheus.yml b/docker/prometheus/prometheus.yml
index f8c0c2440..8a507d896 100644
--- a/docker/prometheus/prometheus.yml
+++ b/docker/prometheus/prometheus.yml
@@ -276,7 +276,6 @@ scrape_configs:
           - https://mana.how/mail
           - https://mana.how/playground
           # ─── Standalone Apps / Games (separate Container, eigene Tunnel-Hostnames) ───
-          - https://whopxl.mana.how
           - https://manavoxel.mana.how
           # Memoro Standalone-Stack (Phase 2 mana e.V. Plattform-Migration)
           - https://memoro.mana.how
@@ -307,7 +306,7 @@ scrape_configs:
           - https://memoro-api.mana.how/health
           - https://memoro-audio.mana.how/health
           # who.mana.how API on /api/decks — root is 404 by design (Phaser-Cantina mounts at /cantina)
-          - https://who.mana.how/api/decks
+          - https://who-api.mana.how/api/decks
           # Verein backoffice (mana e.V. Plattform); only /health returns 200, root is auth-walled
           - https://admin.mana.how/health
     relabel_configs: