diff --git a/systems/palatine-hill/gitea.nix b/systems/palatine-hill/gitea.nix
index 7ddd815..3354980 100644
--- a/systems/palatine-hill/gitea.nix
+++ b/systems/palatine-hill/gitea.nix
@@ -20,15 +20,17 @@ in
       port = 5433;
     };
     settings.server = {
-      domain = "git.alicehuston.xyz";
-      rootUrl = "https://git.alicehuston.xyz/";
-      httpPort = 443;
+      DOMAIN = "git.alicehuston.xyz";
+      ROOT_URL = "https://git.alicehuston.xyz/";
+      HTTP_PORT = 6443;
     };
     stateDir = base_path;
     lfs.enable = true;
     recommendedDefaults = true;
   };
 
+  networking.firewall.allowedTCPPorts = [ 6443 ];
+
   sops.secrets = {
     "gitea/dbpass".owner = "gitea";
   };