diff --git a/deploy/Caddyfile b/deploy/Caddyfile
index 5e6c0c9..1cba80a 100644
--- a/deploy/Caddyfile
+++ b/deploy/Caddyfile
@@ -35,6 +35,12 @@ emigriffith.dev {
 	}
 }
 
+# Old bookmarks to the raw IP (the pre-domain URL) would otherwise get bounced to
+# HTTPS-on-the-IP, which has no cert and fails. Redirect them to the real domain.
+http://75.119.132.91 {
+	redir https://emigriffith.dev{uri} permanent
+}
+
 # Optional: redirect www -> apex. Add a www CNAME/A record first, then uncomment.
 # www.emigriffith.dev {
 # 	redir https://emigriffith.dev{uri} permanent