diff --git a/lxc1/p2-apps/forgejo.yml b/lxc1/p2-apps/forgejo.yml
index f13cbcd..d2ddb79 100644
--- a/lxc1/p2-apps/forgejo.yml
+++ b/lxc1/p2-apps/forgejo.yml
@@ -46,13 +46,13 @@ services:
       # --- SHARED HA ROUTER (git.domain.com) ---
       - "traefik.http.routers.forgejo-shared-${FJ_NODE_ID}.rule=Host(`git.${TRAEFIK_DNS_SUFFIX}`)"
       - "traefik.http.routers.forgejo-shared-${FJ_NODE_ID}.entrypoints=${TRAEFIK_ENTRY_POINTS}"
-      - "traefik.http.routers.forgejo-shared-${FJ_NODE_ID}.tls.certresolver=${TRAEFIK_RESOLVER}"
+      - "traefik.http.routers.forgejo-shared-${FJ_NODE_ID}.tls.certresolver=desec"
       - "traefik.http.routers.forgejo-shared-${FJ_NODE_ID}.service=forgejo-common-svc"
 
       # --- NODE-SPECIFIC ADMIN ROUTER (git1... git2...) ---
       - "traefik.http.routers.forgejo-admin-${FJ_NODE_ID}.rule=Host(`git${FJ_NODE_ID}.${TRAEFIK_DNS_SUFFIX}`)"
       - "traefik.http.routers.forgejo-admin-${FJ_NODE_ID}.entrypoints=${TRAEFIK_ENTRY_POINTS}"
-      - "traefik.http.routers.forgejo-admin-${FJ_NODE_ID}.tls.certresolver=${TRAEFIK_RESOLVER}"
+      - "traefik.http.routers.forgejo-admin-${FJ_NODE_ID}.tls.certresolver=desec"
       - "traefik.http.routers.forgejo-admin-${FJ_NODE_ID}.service=forgejo-common-svc"
 
       # --- SHARED SERVICE ---