diff --git a/2026/2026-07-19.md b/2026/2026-07-19.md
new file mode 100644
index 0000000..4345769
--- /dev/null
+++ b/2026/2026-07-19.md
@@ -0,0 +1,5 @@
+# 2026-07-19
+
+- **Caddy mon bare paths:** `redir /path/ 302` inside `handle` → Location `302` → merchant code 21; fix `redir * /path/ 302`
+- **apply-monitoring-live.sh:** smoke for-loop syntax (missing `\`); use absolute `/home/hernani/koopa-caddy/…` (root `~` = `/root`)
+- Re-apply: `sudo /home/hernani/koopa-caddy/apply-monitoring-live.sh`
diff --git a/configs/caddy/Caddyfile b/configs/caddy/Caddyfile
index e78df90..ae039a5 100644
--- a/configs/caddy/Caddyfile
+++ b/configs/caddy/Caddyfile
@@ -39,28 +39,28 @@ taler.hacktivism.ch {
 
     # surface + aptdeploy HTML (taler.hacktivism.ch only)
     handle /taler-monitoring-surface_err {
-        redir /taler-monitoring-surface_err/ 302
+        redir * /taler-monitoring-surface_err/ 302
     }
     handle /taler-monitoring-surface_err* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
         file_server
     }
     handle /taler-monitoring-surface {
-        redir /taler-monitoring-surface/ 302
+        redir * /taler-monitoring-surface/ 302
     }
     handle /taler-monitoring-surface* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
         file_server
     }
     handle /taler-monitoring-aptdeploy_err {
-        redir /taler-monitoring-aptdeploy_err/ 302
+        redir * /taler-monitoring-aptdeploy_err/ 302
     }
     handle /taler-monitoring-aptdeploy_err* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
         file_server
     }
     handle /taler-monitoring-aptdeploy {
-        redir /taler-monitoring-aptdeploy/ 302
+        redir * /taler-monitoring-aptdeploy/ 302
     }
     handle /taler-monitoring-aptdeploy* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
@@ -68,14 +68,14 @@ taler.hacktivism.ch {
     }
 
     handle /taler-monitoring-mattermost_err {
-        redir /taler-monitoring-mattermost_err/ 302
+        redir * /taler-monitoring-mattermost_err/ 302
     }
     handle /taler-monitoring-mattermost_err* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
         file_server
     }
     handle /taler-monitoring-mattermost {
-        redir /taler-monitoring-mattermost/ 302
+        redir * /taler-monitoring-mattermost/ 302
     }
     handle /taler-monitoring-mattermost* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
@@ -83,14 +83,14 @@ taler.hacktivism.ch {
     }
 
     handle /taler-monitoring-mail_err {
-        redir /taler-monitoring-mail_err/ 302
+        redir * /taler-monitoring-mail_err/ 302
     }
     handle /taler-monitoring-mail_err* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
         file_server
     }
     handle /taler-monitoring-mail {
-        redir /taler-monitoring-mail/ 302
+        redir * /taler-monitoring-mail/ 302
     }
     handle /taler-monitoring-mail* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
@@ -99,14 +99,14 @@ taler.hacktivism.ch {
 
     # taler-monitoring console HTML (host static — not in app containers)
     handle /monitoring_err {
-        redir /monitoring_err/ 302
+        redir * /monitoring_err/ 302
     }
     handle /monitoring_err* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
         file_server
     }
     handle /monitoring {
-        redir /monitoring/ 302
+        redir * /monitoring/ 302
     }
     handle /monitoring* {
         root * /var/www/monitoring-sites/taler.hacktivism.ch
@@ -143,14 +143,14 @@ exchange.hacktivism.ch {
 
     # taler-monitoring console HTML (host static — not in app containers)
     handle /monitoring_err {
-        redir /monitoring_err/ 302
+        redir * /monitoring_err/ 302
     }
     handle /monitoring_err* {
         root * /var/www/monitoring-sites/exchange.hacktivism.ch
         file_server
     }
     handle /monitoring {
-        redir /monitoring/ 302
+        redir * /monitoring/ 302
     }
     handle /monitoring* {
         root * /var/www/monitoring-sites/exchange.hacktivism.ch
@@ -177,14 +177,14 @@ bank.hacktivism.ch {
 
     # taler-monitoring console HTML (host static — not in app containers)
     handle /monitoring_err {
-        redir /monitoring_err/ 302
+        redir * /monitoring_err/ 302
     }
     handle /monitoring_err* {
         root * /var/www/monitoring-sites/bank.hacktivism.ch
         file_server
     }
     handle /monitoring {
-        redir /monitoring/ 302
+        redir * /monitoring/ 302
     }
     handle /monitoring* {
         root * /var/www/monitoring-sites/bank.hacktivism.ch
diff --git a/configs/caddy/README.md b/configs/caddy/README.md
index db596b8..c59d05e 100644
--- a/configs/caddy/README.md
+++ b/configs/caddy/README.md
@@ -13,5 +13,8 @@ Also: `host/caddy/Caddyfile` (same as `Caddyfile` here).
 Handles for `/monitoring*` and `/taler-monitoring-*` live in this `Caddyfile` (prepared under `~/koopa-caddy/`).  
 They must appear **before** the merchant `reverse_proxy`.  
 
-Live install + www ACL: `sudo ~/koopa-caddy/apply-monitoring-live.sh`  
+Live install + www ACL (absolute path; as root `~` is `/root`):
+`sudo /home/hernani/koopa-caddy/apply-monitoring-live.sh`
+
+Bare mon redirs inside `handle` must be `redir * /path/ 302` (not `redir /path/ 302`).  
 See `2026/2026-07-18--monitoring-public-caddy.md` and ISSUES **I-09**.