diff --git a/configs/nixos/modules/services/gitea.nix b/configs/nixos/modules/services/gitea.nix
index e724976..c97a6bb 100644
--- a/configs/nixos/modules/services/gitea.nix
+++ b/configs/nixos/modules/services/gitea.nix
@@ -57,6 +57,7 @@ in
             SSH_LISTEN_PORT = 2222;
             REVERSE_PROXY_TRUSTED_PROXIES = "${cfg.reverseProxyAddress}/32";
           };
+          migrations.ALLOWED_HOST_LIST = "10.23.20.45/32:3000";
           service.DISABLE_REGISTRATION = true;
           # Direct bootstrap access uses HTTP until the public HTTPS route moves.
           session.COOKIE_SECURE = false;