diff --git a/k8s/argocd/apps/00-secrets.yaml b/k8s/argocd/apps/00-secrets.yaml
index be6bb98..d863a83 100644
--- a/k8s/argocd/apps/00-secrets.yaml
+++ b/k8s/argocd/apps/00-secrets.yaml
@@ -17,7 +17,7 @@ spec:
   syncOptions:
     - CreateNamespace=true
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: .
     plugin:
diff --git a/k8s/argocd/apps/00-substrate.yaml b/k8s/argocd/apps/00-substrate.yaml
index d3989d7..f6fa582 100644
--- a/k8s/argocd/apps/00-substrate.yaml
+++ b/k8s/argocd/apps/00-substrate.yaml
@@ -21,7 +21,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/bootstrap/cert-manager/cert-manager-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -54,7 +54,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/bootstrap/ingress/nginx-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -120,7 +120,7 @@ spec:
   project: homelab
   revisionHistoryLimit: 3
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/bootstrap/cert-manager
     directory:
@@ -146,7 +146,7 @@ spec:
   project: homelab
   revisionHistoryLimit: 3
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/bootstrap/ingress
     directory:
@@ -179,7 +179,7 @@ spec:
   project: homelab
   revisionHistoryLimit: 3
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/bootstrap/ingress
     directory:
diff --git a/k8s/argocd/apps/05-networking.yaml b/k8s/argocd/apps/05-networking.yaml
index 46f7a6a..366d29a 100644
--- a/k8s/argocd/apps/05-networking.yaml
+++ b/k8s/argocd/apps/05-networking.yaml
@@ -10,7 +10,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/bootstrap/cilium
   destination:
@@ -31,7 +31,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/bootstrap/coredns
   destination:
diff --git a/k8s/argocd/apps/10-storage-observability.yaml b/k8s/argocd/apps/10-storage-observability.yaml
index 15c370f..5896277 100644
--- a/k8s/argocd/apps/10-storage-observability.yaml
+++ b/k8s/argocd/apps/10-storage-observability.yaml
@@ -17,7 +17,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/infrastructure/minio/minio-operator-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -41,7 +41,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/infrastructure/minio
   destination:
@@ -66,7 +66,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/infrastructure/longhorn
   destination:
@@ -93,7 +93,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/platform/monitoring/prometheus-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -130,7 +130,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/platform/monitoring/blackbox-exporter-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
diff --git a/k8s/argocd/apps/20-logging.yaml b/k8s/argocd/apps/20-logging.yaml
index 9426a07..d8f7613 100644
--- a/k8s/argocd/apps/20-logging.yaml
+++ b/k8s/argocd/apps/20-logging.yaml
@@ -19,7 +19,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/platform/logging/loki-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -53,7 +53,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/platform/logging/grafana-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -87,7 +87,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/platform/logging/promtail-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
diff --git a/k8s/argocd/apps/30-security.yaml b/k8s/argocd/apps/30-security.yaml
index 07fb1a6..20e8084 100644
--- a/k8s/argocd/apps/30-security.yaml
+++ b/k8s/argocd/apps/30-security.yaml
@@ -17,7 +17,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/security/iam/vault-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -46,7 +46,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/security/iam/authentik-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -68,7 +68,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/security/iam
   destination:
@@ -90,7 +90,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/security/ci-cd/charts/forgejo-runner
   destination:
diff --git a/k8s/argocd/apps/40-data.yaml b/k8s/argocd/apps/40-data.yaml
index 899c50f..a44bb62 100644
--- a/k8s/argocd/apps/40-data.yaml
+++ b/k8s/argocd/apps/40-data.yaml
@@ -11,7 +11,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/data
   destination:
diff --git a/k8s/argocd/apps/50-messaging.yaml b/k8s/argocd/apps/50-messaging.yaml
index e1d01e0..7e2bd83 100644
--- a/k8s/argocd/apps/50-messaging.yaml
+++ b/k8s/argocd/apps/50-messaging.yaml
@@ -68,7 +68,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/applications/sqs/charts/kafka-cluster
   destination:
@@ -89,7 +89,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/applications/sqs/charts/queue-crd
   destination:
@@ -110,7 +110,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/applications/sqs/charts/management-service
   destination:
diff --git a/k8s/argocd/apps/60-applications.yaml b/k8s/argocd/apps/60-applications.yaml
index 9b8b66b..e38a61e 100644
--- a/k8s/argocd/apps/60-applications.yaml
+++ b/k8s/argocd/apps/60-applications.yaml
@@ -18,7 +18,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/applications/temporal/temporal-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -47,7 +47,7 @@ spec:
       helm:
         valueFiles:
           - $values/k8s/applications/portainer/portainer-values.yaml
-    - repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
       targetRevision: main
       ref: values
   destination:
@@ -70,7 +70,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/applications/cloudflared
   destination:
@@ -93,7 +93,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/applications/duckdns
   destination:
diff --git a/k8s/argocd/bootstrap/BOOTSTRAP.md b/k8s/argocd/bootstrap/BOOTSTRAP.md
index 0823564..504ad47 100644
--- a/k8s/argocd/bootstrap/BOOTSTRAP.md
+++ b/k8s/argocd/bootstrap/BOOTSTRAP.md
@@ -63,7 +63,7 @@ argocd app sync forgejo
 
 ```bash
 # 6. Push this repo to the freshly-created Forgejo so Phase 1 has a source.
-git remote add forgejo http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+git remote add forgejo https://forgejo.riotpiao.com/riotpiao.com/homelab.git
 git push forgejo main
 
 # 7. (Optional) Cloudflared tunnel secret — if the SOPS CMP plugin is NOT yet
diff --git a/k8s/argocd/projects/homelab-project.yaml b/k8s/argocd/projects/homelab-project.yaml
index 0fcacf0..69e37c1 100644
--- a/k8s/argocd/projects/homelab-project.yaml
+++ b/k8s/argocd/projects/homelab-project.yaml
@@ -11,7 +11,7 @@ metadata:
 spec:
   description: Homelab GitOps — single-repo, in-cluster destinations only
   sourceRepos:
-    - http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    - https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     # Public Helm chart repos referenced by k8s/argocd/apps/* and bootstrap/*
     - https://cloudnative-pg.github.io/charts
     - https://dl.gitea.com/charts/
diff --git a/k8s/argocd/root/homelab-root.yaml b/k8s/argocd/root/homelab-root.yaml
index f195081..8a50935 100644
--- a/k8s/argocd/root/homelab-root.yaml
+++ b/k8s/argocd/root/homelab-root.yaml
@@ -12,7 +12,7 @@ metadata:
 spec:
   project: homelab
   source:
-    repoURL: http://forgejo.riotpiao.com:3000/riotpiao.com/homelab.git
+    repoURL: https://forgejo.riotpiao.com/riotpiao.com/homelab.git
     targetRevision: main
     path: k8s/argocd/apps
     directory: