diff --git a/cloudflared-config.yml b/cloudflared-config.yml
index ac8a0945a..547dee29a 100644
--- a/cloudflared-config.yml
+++ b/cloudflared-config.yml
@@ -148,7 +148,7 @@ ingress:
     service: http://localhost:3065
   - hostname: research.mana.how
     service: http://localhost:3068
-  - hostname: analytics.mana.how
+  - hostname: community.mana.how
     service: http://localhost:3064
 
   # ============================================
diff --git a/docker-compose.macmini.yml b/docker-compose.macmini.yml
index 0f6251077..112fb88fa 100644
--- a/docker-compose.macmini.yml
+++ b/docker-compose.macmini.yml
@@ -587,7 +587,7 @@ services:
       # ("Wachsame Eule #4528"). Set in .env.macmini — rotation re-keys
       # only future pseudonyms, existing rows keep the old hash/name.
       FEEDBACK_PSEUDONYM_SECRET: ${FEEDBACK_PSEUDONYM_SECRET:?missing in .env.macmini}
-      CORS_ORIGINS: https://mana.how
+      CORS_ORIGINS: https://mana.how,https://community.mana.how
     ports:
       - "3064:3064"
     healthcheck:
@@ -950,7 +950,7 @@ services:
       # /api/v1/(public/)feedback/* endpoints directly; SSR uses the
       # internal docker-network URL.
       PUBLIC_MANA_ANALYTICS_URL: http://mana-analytics:3064
-      PUBLIC_MANA_ANALYTICS_URL_CLIENT: https://analytics.mana.how
+      PUBLIC_MANA_ANALYTICS_URL_CLIENT: https://community.mana.how
       # mana-ai background Mission Runner. Browser calls the audit
       # endpoint (/api/v1/me/ai-audit) to render the Workbench
       # "Datenzugriff" tab. SSR doesn't hit this service directly.