diff --git a/README.md b/README.md
index 93f611e..acf1ace 100644
--- a/README.md
+++ b/README.md
@@ -8,7 +8,7 @@ actions, not reusable workflows: Forgejo LTS 11 does not support
 - `lint-checks` — prettier + eslint + conventional-commit checks (each
   `--if-present`/config-gated); run after `node-checks` in the same job
 - `build-push` — docker build + push to the Forgejo registry
-  (`git.lab.holtlabs.xyz`), tags `<short-sha>` + `latest`
+  (`git.holtlabs.xyz`), tags `<short-sha>` + `latest`
 - `gitops-bump` — set the image tag in `nholtware/gitops` via
   `kustomize edit set image`; ArgoCD deploys from there
 
@@ -23,19 +23,19 @@ jobs:
     runs-on: docker
     steps:
       - uses: actions/checkout@v4
-      - uses: https://git.lab.holtlabs.xyz/nholtware/workflows/node-checks@v1
-      - uses: https://git.lab.holtlabs.xyz/nholtware/workflows/lint-checks@v1
+      - uses: https://git.holtlabs.xyz/nholtware/workflows/node-checks@v1
+      - uses: https://git.holtlabs.xyz/nholtware/workflows/lint-checks@v1
   deploy:
     needs: checks
     runs-on: host
     steps:
       - uses: actions/checkout@v4
-      - uses: https://git.lab.holtlabs.xyz/nholtware/workflows/build-push@v1
+      - uses: https://git.holtlabs.xyz/nholtware/workflows/build-push@v1
         with:
           app-name: my-app
           registry-user: ${{ secrets.REGISTRY_USER }}
           registry-token: ${{ secrets.REGISTRY_TOKEN }}
-      - uses: https://git.lab.holtlabs.xyz/nholtware/workflows/gitops-bump@v1
+      - uses: https://git.holtlabs.xyz/nholtware/workflows/gitops-bump@v1
         with:
           app-name: my-app
           gitops-token: ${{ secrets.GITOPS_TOKEN }}
diff --git a/build-push/action.yaml b/build-push/action.yaml
index e29213a..a2037de 100644
--- a/build-push/action.yaml
+++ b/build-push/action.yaml
@@ -20,7 +20,7 @@ inputs:
   registry:
     description: Registry host (HTTPS, real cert; add :port only if non-443)
     required: false
-    default: "git.lab.holtlabs.xyz"
+    default: "git.holtlabs.xyz"
   registry-user:
     description: Registry login user (pass secrets.REGISTRY_USER)
     required: true
diff --git a/gitops-bump/action.yaml b/gitops-bump/action.yaml
index fe26ac8..2a78651 100644
--- a/gitops-bump/action.yaml
+++ b/gitops-bump/action.yaml
@@ -18,7 +18,7 @@ inputs:
   registry:
     description: Registry host:port (must match build-push)
     required: false
-    default: "git.lab.holtlabs.xyz"
+    default: "git.holtlabs.xyz"
 runs:
   using: composite
   steps:
@@ -31,7 +31,7 @@ runs:
         IMAGE="${{ inputs.registry }}/$GITHUB_REPOSITORY_OWNER/${{ inputs.app-name }}"
         DIR="$(mktemp -d)"
         trap 'rm -rf "$DIR"' EXIT
-        git clone --depth 1 "https://ci-bot:${GITOPS_TOKEN}@git.lab.holtlabs.xyz/${{ inputs.gitops-repo }}.git" "$DIR"
+        git clone --depth 1 "https://ci-bot:${GITOPS_TOKEN}@git.holtlabs.xyz/${{ inputs.gitops-repo }}.git" "$DIR"
         cd "$DIR/manifests/${{ inputs.app-name }}"
         kustomize edit set image "${{ inputs.app-name }}=$IMAGE:$TAG"
         cd "$DIR"