diff --git a/roles/infra/tasks/git.yml b/roles/infra/tasks/git.yml
index 3fca834..cada2ab 100644
--- a/roles/infra/tasks/git.yml
+++ b/roles/infra/tasks/git.yml
@@ -29,6 +29,7 @@
       path: "~/.config/systemd/user/"
     label:
       traefik.enable: "true"
+      traefik.http.routers.gitea.entrypoints: "http"
       traefik.http.routers.gitea.rule: "Host(`git.wtf.lt`)"
       traefik.http.middlewares.gitea-https-redirect.redirectscheme.scheme: "https"
       traefik.http.routers.gitea.middlewares: "gitea-https-redirect"
diff --git a/roles/infra/templates/traefik.container.j2 b/roles/infra/templates/traefik.container.j2
index 80bcc24..f78453f 100644
--- a/roles/infra/templates/traefik.container.j2
+++ b/roles/infra/templates/traefik.container.j2
@@ -9,7 +9,7 @@ Restart=always
 [Container]
 ContainerName=traefik
 Image=docker.io/library/traefik:latest
-Exec=--api.dashboard=true --api.insecure=true --certificatesresolvers.lets-encrypt.acme.email={{ infra_acme.email }} --certificatesresolvers.lets-encrypt.acme.storage=/{{ infra_acme.storage }} --certificatesresolvers.lets-encrypt.acme.tlschallenge=true --entrypoints.http --entrypoints.http.http.redirections.entryPoint.to=https --entrypoints.http.http.redirections.entryPoint.scheme=https --entrypoints.https --providers.docker=true
+Exec=--api.dashboard=true --api.insecure=true --certificatesresolvers.lets-encrypt.acme.email={{ infra_acme.email }} --certificatesresolvers.lets-encrypt.acme.storage=/{{ infra_acme.storage }} --certificatesresolvers.lets-encrypt.acme.tlschallenge=true --entrypoints.http --entrypoints.http.address=:80 --entrypoints.http.http.redirections.entryPoint.to=:443 --entrypoints.http.http.redirections.entryPoint.scheme=https --entrypoints.https --providers.docker=true
 Network=podman
 Notify=true
 PublishPort=8080:8080