diff --git a/k8s/bootstrap/coredns/coredns-configmap.yaml b/k8s/bootstrap/coredns/coredns-configmap.yaml
index 612ea7c..5cccd40 100644
--- a/k8s/bootstrap/coredns/coredns-configmap.yaml
+++ b/k8s/bootstrap/coredns/coredns-configmap.yaml
@@ -41,6 +41,7 @@ data:
         # port 3000, so containerd image pulls (which use https/:443) get
         # `dial tcp <clusterIP>:443: i/o timeout`. SSH stays on its own LB service.
         rewrite name forgejo.riotpiao.com ingress-nginx-controller.ingress-nginx.svc.cluster.local
+        rewrite name git.riotpiao.com forgejo-gitea-ssh.cicd.svc.cluster.local
 
         # Rewrite homelab hostnames to the nginx ingress controller so in-cluster pods
         # hit nginx TLS termination (cert-manager cert) and preserve the Host header.