fix(comfyui): correct port 8188->18188, add TLS ingress at comfyui.riotpiao.com

ai-dock image runs ComfyUI on port 18188 (10000+8188), not 8188.
Caddy in the image doesn't proxy 8188->18188, so probes and service
must target 18188 directly. This caused 273 startup probe failures
and constant restarts over 45h.

- deployment: containerPort, probes, env all point to 18188
- service: targetPort 18188
- ingress: TLS via letsencrypt, WebSocket upgrade headers for live preview
- CoreDNS: rewrite comfyui.riotpiao.com to nginx controller

k8s/apps/comfyui/deployment.yaml

@@ -26,13 +26,15 @@ spec:
         - name: comfyui
           image: ghcr.io/ai-dock/comfyui:v2-cuda-12.1.1-base-22.04
           ports:
-            - containerPort: 8188
+            - containerPort: 18188
               protocol: TCP
           env:
             - name: NVIDIA_VISIBLE_DEVICES
               value: "all"
-            - name: COMFYUI_FLAGS
-              value: "--listen 0.0.0.0 --port 8188"
+            # ai-dock adds 10000 to port: ComfyUI listens on 18188 (localhost)
+            # caddy is NOT configured to proxy 8188->18188 in this image
+            - name: COMFYUI_PORT_HOST
+              value: "18188"
           resources:
             requests:
               cpu: "4"
@@ -50,13 +52,13 @@ spec:
           readinessProbe:
             httpGet:
               path: /
-              port: 8188
+              port: 18188
             periodSeconds: 10
             initialDelaySeconds: 30
           startupProbe:
             httpGet:
               path: /
-              port: 8188
+              port: 18188
             failureThreshold: 60
             periodSeconds: 10
       volumes: