This is great news to get mitmproxy (which has been updated with a specific --emudra flag) to intercept your iot widgets that you couldn’t install a custom ca on.

If you do a GET / request against the IP (typically http too) does it yield a redirect to your proper fqdn? It shouldn’t return anything and remain stealthy as you likely dont want to expose anything directly on IP connections and rely solely on your vhosts.