diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index 8964e01..421b397 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -13,6 +13,21 @@
 - **[MONITORING]** Deleted 7 duplicate monitors (MikroTik AdGuard Home ×3, MikroTik Tailscale ×2, MikroTik DNS ×2)
 - **[MONITORING]** Final state: 27 clean monitors, no legacy 192.168.31.x references remaining
 
+### Home Assistant Traefik Fix
+- **[TRAEFIK]** Fixed HA service URL in services.yml: 192.168.10.200 (NanoKVM) → 192.168.10.20 (Unraid) — was causing 502
+- **[HA]** Added `http:` section to configuration.yaml with `trusted_proxies: 172.18.0.0/16, 192.168.10.0/24` — HA was rejecting forwarded requests from Traefik (400)
+
+### Nextcloud Upgrade
+- **[NEXTCLOUD]** Ran `occ upgrade` — pending app/database migrations were causing 503 on all requests
+
+### Uptime Kuma Monitor Fixes
+- **[MONITORING]** Fixed Nextcloud monitor URL: nextcloud.xtrm-lab.org → cloud.xtrm-lab.org (matching actual Traefik route)
+- **[MONITORING]** Fixed Speedtest monitor URL: speedtest.xtrm-lab.org → speed.xtrm-lab.org (matching actual Traefik route)
+- **[MONITORING]** Deleted AdGuard DNS monitor (dns.xtrm-lab.org) — no Traefik route, duplicate of MikroTik AdGuard Home monitor
+- **[MONITORING]** Deleted NetBox monitor — container not running/removed
+- **[MONITORING]** Deleted MikroTik Tailscale monitor — 100.64.0.1 CGNAT not reachable from Unraid
+- **[MONITORING]** Final state: 24 monitors, all green
+
 ### Kasm Workspaces Fix
 - **[KASM]** Fixed session connection failure when accessing via Traefik reverse proxy
 - **[KASM]** Changed zone `proxy_port` from 6333 to 443 in kasm_db — browser WebSocket now routes through Traefik instead of trying unreachable port 6333