diff --git a/pomerium-allinone.yaml b/pomerium-allinone.yaml
index f5b40e3..51a7149 100644
--- a/pomerium-allinone.yaml
+++ b/pomerium-allinone.yaml
@@ -83,7 +83,24 @@ spec:
               preserve_host_header: true
               allow_public_unauthenticated_access: true
 
-            # Forgejo Git - requires authentication
+            # Forgejo Git HTTP protocol (push/pull - Forgejo handles auth)
+            - from: https://git.nge6.com
+              to: http://forgejo-http.forgejo.svc.cluster.local:3000
+              regex: /.+/info/refs
+              preserve_host_header: true
+              allow_public_unauthenticated_access: true
+            - from: https://git.nge6.com
+              to: http://forgejo-http.forgejo.svc.cluster.local:3000
+              regex: /.+/git-upload-pack
+              preserve_host_header: true
+              allow_public_unauthenticated_access: true
+            - from: https://git.nge6.com
+              to: http://forgejo-http.forgejo.svc.cluster.local:3000
+              regex: /.+/git-receive-pack
+              preserve_host_header: true
+              allow_public_unauthenticated_access: true
+
+            # Forgejo Git web UI - requires authentication
             - from: https://git.nge6.com
               to: http://forgejo-http.forgejo.svc.cluster.local:3000
               preserve_host_header: true