diff --git a/core/container/src/podman_client.rs b/core/container/src/podman_client.rs
index f5cfa103..927d409c 100644
--- a/core/container/src/podman_client.rs
+++ b/core/container/src/podman_client.rs
@@ -121,6 +121,10 @@ impl PodmanClient {
             "cryptpad" => "http://localhost:3003",
             "penpot" => "http://localhost:9001",
             "immich_server" | "immich" => "http://localhost:2283",
+            // Gitea publishes SSH (2222) and web (3001). Without a manifest on
+            // disk, extract_lan_address() returns whichever podman lists first —
+            // which can be the SSH port, breaking the launch. Pin the web UI.
+            "gitea" => "http://localhost:3001",
             "nginx-proxy-manager" => "http://localhost:8081",
             "fedimint-gateway" => "http://localhost:8176",
             "endurain" => "http://localhost:8080",