diff --git a/proxy/Caddyfile b/proxy/Caddyfile
index 07d9ac3..99e507a 100644
--- a/proxy/Caddyfile
+++ b/proxy/Caddyfile
@@ -31,6 +31,15 @@
     reverse_proxy server:3000
 }
 
+# ── Static services (not managed by HIY) ──────────────────────────────────────
+
+# Set FORGEJO_DOMAIN in .env (e.g. git.yourdomain.com). Falls back to a
+# non-routable placeholder so Caddy starts cleanly even if Forgejo isn't used.
+{$FORGEJO_DOMAIN:forgejo.localhost} {
+    tls {$ACME_EMAIL:internal}
+    reverse_proxy forgejo:3000
+}
+
 # Deployed apps are added here dynamically by hiy-server via the Caddy API.
 # Each entry looks like:
 #