diff --git a/gitea/README.md b/gitea/README.md
index c6a5dfe..ed6ee88 100644
--- a/gitea/README.md
+++ b/gitea/README.md
@@ -7,3 +7,5 @@ Should ArgoCD be down manifests here can be applied with:
 ```
 kubectl apply -n gitea -f application.yaml
 ```
+
+Gitea DOES NOT go through Traefik. It has its own IP because ssh :22 would conflict with kube worker ssh. On its own IP, at the moment it doesn't flirt with Traefik — also has its own certificate.
diff --git a/gitea/application.yaml b/gitea/application.yaml
index 97c1db1..40ec6fa 100644
--- a/gitea/application.yaml
+++ b/gitea/application.yaml
@@ -13,6 +13,8 @@ spec:
     name: default
   secretName: git-tls
   revisionHistoryLimit: 1
+
+# Gitea DOES NOT go through Traefik. It has its own IP because ssh :22 would conflict with kube worker ssh. On its own IP, at the moment it doesn't flirt with Traefik — also has its own certificate.
 ---
 apiVersion: codemowers.cloud/v1beta1
 kind: SecretClaim