Update TLS configuration for IP address access

- Switch IP address HTTPS to use on_demand TLS mode
- Allows proper certificate generation for IP-based access
- Maintains self-signed certificates for internal use

Caddyfile

@@ -60,10 +60,12 @@ http://10.76.152.164 {
     import reverse_proxy_config
 }
 
-# Handle IP address access (HTTPS - self-signed)
+# Handle IP address access (HTTPS - self-signed with IP in certificate)
 https://10.76.152.164 {
     import reverse_proxy_config
-    tls internal
+    tls {
+        on_demand
+    }
 }
 
 # Catch-all for any other HTTP requests