diff --git a/ansible/roles/caddy_site/README.md b/ansible/roles/caddy_site/README.md
index 6891070..c8e32af 100644
--- a/ansible/roles/caddy_site/README.md
+++ b/ansible/roles/caddy_site/README.md
@@ -92,3 +92,27 @@ upstream hostname` in every case. `datum-gateway` previously said `# Resolve via
 Tailscale MagicDNS`. Migrating it therefore rewrites one comment line, which
 Caddy ignores. Every other site renders byte-identical to what its playbook
 produced.
+
+## Sites on the hosts that this role does NOT manage
+
+Four vhosts exist in `/etc/caddy/sites-enabled/` that no playbook writes. They
+were made by hand. The role only ever writes the one file it is told to, so it
+leaves them alone — but nothing in the repo records them, and that is why they
+are listed here. Checked 2026-09-11:
+
+| File | Host | Serves | State |
+|---|---|---|---|
+| `uptime-kuma.conf` | watchtower | `localhost:3001` | **HTTP 302 — still live**, see below |
+| `arbretstaging.conf` | vipy | `arbret-staging-box:80` via MagicDNS | HTTP 200 |
+| `bitcoininfra.conf` | vipy | static `file_server` from `/var/www/bitcoin-services-home` | HTTP 200 |
+| `scriberr.conf` | vipy | `scriberr-box:8080` via MagicDNS | HTTP 502 — upstream down |
+
+**`uptime-kuma.conf` must not be deleted as dead config.** Uptime Kuma was
+"decommissioned" in the repo — its playbooks archived and its credentials pulled
+from the vault — but the container is **still running** on watchtower
+(`louislam/uptime-kuma:latest`, created 2026-02-07, `restart=unless-stopped`)
+and is still reachable at its public subdomain. Only the Ansible code was
+retired; the service was not. See `archive/uptime_kuma/`.
+
+`scriberr` returning 502 is the one that looks like genuine rot: it proxies to a
+`scriberr-box` that is not answering, and `scriberr-box` is not in the inventory.
diff --git a/ansible/services/bitcoin-knots/deploy_bitcoin_knots_playbook.yml b/ansible/services/bitcoin-knots/deploy_bitcoin_knots_playbook.yml
index 4e9faa3..1ae5823 100644
--- a/ansible/services/bitcoin-knots/deploy_bitcoin_knots_playbook.yml
+++ b/ansible/services/bitcoin-knots/deploy_bitcoin_knots_playbook.yml
@@ -740,7 +740,7 @@
         state: restarted
 
 
-- name: Setup public Bitcoin P2P forwarding on vipy via systemd-socket-proxyd
+- name: Setup public Bitcoin P2P forwarding on the edge host
   hosts: edge
   become: yes
   vars_files:
diff --git a/ansible/services/datum-gateway/deploy_datum_gateway_playbook.yml b/ansible/services/datum-gateway/deploy_datum_gateway_playbook.yml
index 1ddc75c..0c53e9d 100644
--- a/ansible/services/datum-gateway/deploy_datum_gateway_playbook.yml
+++ b/ansible/services/datum-gateway/deploy_datum_gateway_playbook.yml
@@ -487,7 +487,7 @@
 # ===========================================
 # Caddy Reverse Proxy for DATUM Dashboard (on vipy)
 # ===========================================
-- name: Configure Caddy reverse proxy for DATUM Gateway dashboard on vipy
+- name: Configure Caddy reverse proxy for DATUM Gateway dashboard on the edge host
   hosts: edge
   become: yes
   vars_files:
@@ -650,7 +650,7 @@
 # Miners connect to vipy:23334; traffic is forwarded to knots-box:23334
 # over the Tailscale network, matching the Bitcoin P2P proxy pattern.
 # ===========================================
-- name: Setup public Stratum port forwarding on vipy via systemd-socket-proxyd
+- name: Setup public Stratum port forwarding on the edge host
   hosts: edge
   become: yes
   vars_files:
diff --git a/ansible/services/fulcrum/deploy_fulcrum_playbook.yml b/ansible/services/fulcrum/deploy_fulcrum_playbook.yml
index 6ffe254..01e9f17 100644
--- a/ansible/services/fulcrum/deploy_fulcrum_playbook.yml
+++ b/ansible/services/fulcrum/deploy_fulcrum_playbook.yml
@@ -540,7 +540,7 @@
         state: restarted
 
 
-- name: Setup public Fulcrum SSL forwarding on vipy via systemd-socket-proxyd
+- name: Setup public Fulcrum SSL forwarding on the edge host
   hosts: edge
   become: yes
   vars_files:
diff --git a/ansible/services/memos/deploy_memos_playbook.yml b/ansible/services/memos/deploy_memos_playbook.yml
index 83c187e..04e99cf 100644
--- a/ansible/services/memos/deploy_memos_playbook.yml
+++ b/ansible/services/memos/deploy_memos_playbook.yml
@@ -156,7 +156,7 @@
         state: restarted
 
 
-- name: Configure Caddy reverse proxy for Memos on vipy (proxying via Tailscale)
+- name: Configure Caddy reverse proxy for Memos on the edge host (via Tailscale)
   hosts: edge
   become: yes
   vars_files:
diff --git a/ansible/services/mempool/deploy_mempool_playbook.yml b/ansible/services/mempool/deploy_mempool_playbook.yml
index ba3e9e9..e9cab0e 100644
--- a/ansible/services/mempool/deploy_mempool_playbook.yml
+++ b/ansible/services/mempool/deploy_mempool_playbook.yml
@@ -603,7 +603,7 @@
         - /tmp/ansible_mempool_config.yml
         - /tmp/mempool_push_urls.yml
 
-- name: Configure Caddy reverse proxy for Mempool on vipy
+- name: Configure Caddy reverse proxy for Mempool on the edge host
   hosts: edge
   become: yes
   vars_files:
diff --git a/ansible/services/phoenixd/deploy_phoenixd_playbook.yml b/ansible/services/phoenixd/deploy_phoenixd_playbook.yml
index f20ecdc..8b30a1f 100644
--- a/ansible/services/phoenixd/deploy_phoenixd_playbook.yml
+++ b/ansible/services/phoenixd/deploy_phoenixd_playbook.yml
@@ -19,7 +19,7 @@
 # ⚠️  After the first run, back up {{ phoenixd_data_dir }}/seed.dat. Losing it
 #     means losing the funds. See setup_backup_phoenixd_to_lapy.yml.
 
-- name: Deploy phoenixd on vipy
+- name: Deploy phoenixd on the edge host
   hosts: edge
   become: yes
   vars_files: