diff --git a/cloudflared-config.yml b/cloudflared-config.yml
index 6949bd678..165257151 100644
--- a/cloudflared-config.yml
+++ b/cloudflared-config.yml
@@ -408,10 +408,16 @@ ingress:
   # Herbatrium — Citizen-Science-Pflanzenbeobachtungen (Code/herbatrium/).
   # Host-Ports 3103+3104 (statt 3101+3102) wegen memoro-audio-Konflikt
   # auf 3101. Service-interne Ports bleiben 3101+3000 per PORTS.md.
+  # 2026-05-20 Co-Domain herbatrium.com + api.herbatrium.com hinzugefügt
+  # (kein Primary-Switch, herbatrium.mana.how bleibt funktional).
   - hostname: herbatrium.mana.how
     service: http://localhost:3104
   - hostname: herbatrium-api.mana.how
     service: http://localhost:3103
+  - hostname: herbatrium.com
+    service: http://localhost:3104
+  - hostname: api.herbatrium.com
+    service: http://localhost:3103
 
   # mana-sync-v2 — Event-Sourcing-Platform (mana/services/mana-sync/).
   # Container `mana-sync-v2` (Host-Port 3055 → Service 3050). SOT für
diff --git a/docker-compose.macmini.yml b/docker-compose.macmini.yml
index 3af473bdf..8d0e85cd8 100644
--- a/docker-compose.macmini.yml
+++ b/docker-compose.macmini.yml
@@ -248,7 +248,7 @@ services:
       # Enforced by services/mana-auth/src/auth/sso-config.spec.ts.
       # All productivity modules now live under mana.how (path-based) —
       # no per-module subdomain entries required here.
-      CORS_ORIGINS: https://mana.how,https://auth.mana.how,https://whopxl.mana.how,https://cardecky.mana.how,https://cardecky-api.mana.how,https://wordeck.com,https://api.wordeck.com,https://memoro-app.mana.how,https://zitare.com,https://app.zitare.com,https://api.zitare.com,https://zitare-api.mana.how,https://nutriphi.mana.how,https://nutriphi-api.mana.how,https://manawald.mana.how,https://werdrobe.com,https://api.werdrobe.com,https://pageta.mana.how,https://pageta-api.mana.how,https://pageta.com,https://api.pageta.com,https://herbatrium.mana.how,https://herbatrium-api.mana.how,https://moodlit.mana.how,https://moodlit-api.mana.how,https://comicello.com,https://api.comicello.com,https://comicello.mana.how,https://comicello-api.mana.how,https://uload-api.mana.how,https://ulo.ad,https://mukke.mana.how,https://mukke-api.mana.how,https://manaclick.mana.how
+      CORS_ORIGINS: https://mana.how,https://auth.mana.how,https://whopxl.mana.how,https://cardecky.mana.how,https://cardecky-api.mana.how,https://wordeck.com,https://api.wordeck.com,https://memoro-app.mana.how,https://zitare.com,https://app.zitare.com,https://api.zitare.com,https://zitare-api.mana.how,https://nutriphi.mana.how,https://nutriphi-api.mana.how,https://manawald.mana.how,https://werdrobe.com,https://api.werdrobe.com,https://pageta.mana.how,https://pageta-api.mana.how,https://pageta.com,https://api.pageta.com,https://herbatrium.mana.how,https://herbatrium-api.mana.how,https://herbatrium.com,https://api.herbatrium.com,https://moodlit.mana.how,https://moodlit-api.mana.how,https://comicello.com,https://api.comicello.com,https://comicello.mana.how,https://comicello-api.mana.how,https://uload-api.mana.how,https://ulo.ad,https://mukke.mana.how,https://mukke-api.mana.how,https://manaclick.mana.how
     ports:
       - "3001:3001"
     healthcheck: