diff --git a/machines/gerd/services/forgejo.nix b/machines/gerd/services/forgejo.nix
index 36251e5..2f68d66 100644
--- a/machines/gerd/services/forgejo.nix
+++ b/machines/gerd/services/forgejo.nix
@@ -19,6 +19,10 @@
     
   };
 
+  # TODO(eyJhb): remove after our ban expires (and nginx config)
+  # already issued for this exact set of domains in the last 168 hours: git.fricloud.dk, retry after 2024-08-10T01:34:44Z
+  security.acme.certs."git.fricloud.dk".extraDomainNames = [ "git2.fricloud.dk" ];
+
   services.nginx = {
     virtualHosts."git.fricloud.dk" = {
       forceSSL = true;