diff --git a/configs/services/forgejo.nix b/configs/services/forgejo.nix
index 1ab8775..7f37ba6 100644
--- a/configs/services/forgejo.nix
+++ b/configs/services/forgejo.nix
@@ -32,6 +32,8 @@ in
       service.DISABLE_REGISTRATION = true;
       repository.USE_COMPAT_SSH_URI = true;
       security.LOGIN_REMEMBER_DAYS = 365;
+      # required because go doesn't recognize Let's Encrypt as a valid CA
+      migrations.SKIP_TLS_VERIFY = true;
     };
   };