diff --git a/myorg-assistant/cronjobs/git-sync.yaml b/myorg-assistant/cronjobs/git-sync.yaml
index 1078e57..58a3a8f 100644
--- a/myorg-assistant/cronjobs/git-sync.yaml
+++ b/myorg-assistant/cronjobs/git-sync.yaml
@@ -31,6 +31,10 @@ spec:
             - sh
             - -c
             - |
+              # Normalize the repo URL host to the correct Gitea subdomain.
+              # The GIT_REPO_URL secret historically contained gitea.rogi.casa,
+              # which 526s through Cloudflare; the working subdomain is git.rogi.casa.
+              export GIT_REPO_URL="$(echo "${GIT_REPO_URL}" | sed -E 's#https?://[^/@]+@?gitea\.rogi\.casa#https://'"${GIT_USERNAME}"':'"${GIT_TOKEN}"'@git.rogi.casa#')"
               if [ ! -d /data/myorg/.git ]; then
                 echo "Cloning repository..."
                 git clone ${GIT_REPO_URL} /data/myorg