diff --git a/PROGRESS.md b/PROGRESS.md
index a5d6733..77160ba 100644
--- a/PROGRESS.md
+++ b/PROGRESS.md
@@ -11,7 +11,7 @@
   - Scripts: `deploy/build.sh`, `deploy/push.sh`, `deploy/deploy.sh`, `deploy/deploy-prod.sh`, `deploy/deploy-staging.sh`, `deploy/rollback-prod.sh`
   - K8s manifests: `k8s/app.yaml` (ConfigMap/Secret/Deployment/Service/Ingress), `k8s/namespaces.yaml`, `k8s/cert-issuers.yaml`
 - Cluster:
-  - Hetzner k3s node: `lomavuokraus-k3s` hel1 cx22 IP `157.180.66.64`
+  - Hetzner k3s node: `lomavuokraus-k3s` hel1 cx23 IP `157.180.66.64`
   - k3s v1.33.5 installed; kubeconfig in `k3s.yaml` (git-ignored) and `~/.kube/config`
   - Namespaces: `lomavuokraus-prod`, `lomavuokraus-staging`
   - cert-manager v1.15.3 installed; ClusterIssuers `letsencrypt-prod`/`staging`
diff --git a/docs/infra.html b/docs/infra.html
index d3aebea..ccc73e2 100644
--- a/docs/infra.html
+++ b/docs/infra.html
@@ -19,7 +19,7 @@ flowchart LR
     DNS["lomavuokraus.fi\nstaging.lomavuokraus.fi\napi.lomavuokraus.fi"] --> Traefik["Traefik ingress\n(class: traefik)"]
     User["User browser"] -->|"HTTPS"| Traefik
     CertMgr["cert-manager\nletsencrypt prod/staging"] -->|"TLS"| Traefik
-    subgraph Cluster["k3s hel1 cx22 (157.180.66.64)"]
+    subgraph Cluster["k3s hel1 cx23 (157.180.66.64)"]
         Traefik --> Service["Service :80 -> 8080"]
         Service --> Varnish["Varnish cache\n(static + /api/images/*)"]
         Varnish --> Pod["Next.js pods (2)\n(port 3000)"]
@@ -39,7 +39,7 @@ flowchart LR
         <div class="diagram">
           <pre class="mermaid">
 flowchart TB
-    Users["Users"] -->|"HTTPS"| K3s["Node A: k3s (hel1 cx22)\nTraefik + cert-manager"]
+    Users["Users"] -->|"HTTPS"| K3s["Node A: k3s (hel1 cx23)\nTraefik + cert-manager"]
     subgraph HetznerCloud["Hetzner Cloud"]
         K3s
         DB["Node B: Postgres VM\n46.62.203.202"]
@@ -68,7 +68,7 @@ flowchart TB
       <section class="card">
         <h2>Cluster &amp; Namespaces</h2>
         <ul>
-          <li>Single-node k3s (Hetzner hel1 cx22) at <code>157.180.66.64</code>.</li>
+          <li>Single-node k3s (Hetzner hel1 cx23) at <code>157.180.66.64</code>.</li>
           <li>Namespaces: <code>lomavuokraus-prod</code>, <code>lomavuokraus-staging</code>, <code>lomavuokraus-test</code>.</li>
           <li>Ingress controller: Traefik (k3s default).</li>
           <li>cert-manager v1.15.3 with ClusterIssuers: