Portainer go-git resolves gitea.ginnoir.com inside Docker. Alias was on the gitea container → port 443 refused. Moved alias to Caddy so go-git reaches Caddy:443 (TLS ok) → proxies to gitea:3000. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>