diff --git a/machines/grey-area/services/forgejo.nix b/machines/grey-area/services/forgejo.nix
index 5669516..b5c2bb8 100644
--- a/machines/grey-area/services/forgejo.nix
+++ b/machines/grey-area/services/forgejo.nix
@@ -15,7 +15,7 @@
     server = {
       ROOT_URL = "https://git.geokkjer.eu";
       SSH_DOMAIN = "git.geokkjer.eu";
-      SSH_PORT = 1337;
+      SSH_PORT = 2222;
       # Use system SSH server instead of built-in
       DISABLE_SSH = false;
       START_SSH_SERVER = false;
diff --git a/machines/reverse-proxy/configuration.nix b/machines/reverse-proxy/configuration.nix
index 62bb1a7..115cf13 100644
--- a/machines/reverse-proxy/configuration.nix
+++ b/machines/reverse-proxy/configuration.nix
@@ -19,9 +19,9 @@
   # DMZ-specific firewall configuration - simplified for testing
   networking.firewall = {
     enable = true;
-    # Allow HTTP/HTTPS from external network and Git SSH on port 1337
+    # Allow HTTP/HTTPS from external network and Git SSH on port 2222
     # Temporarily allow SSH from everywhere - rely on fail2ban for protection
-    allowedTCPPorts = [ 22 80 443 1337 ];
+    allowedTCPPorts = [ 22 80 443 2222 ];
     allowedUDPPorts = [ ];
     # Explicitly block all other traffic
     rejectPackets = true;
@@ -81,7 +81,7 @@
       }
       
       server {
-          listen 1337;
+          listen 2222;
           proxy_pass git_ssh_backend;
           proxy_timeout 300s;
           proxy_connect_timeout 10s;