diff --git a/.cursor/rules/git-deploy.mdc b/.cursor/rules/git-deploy.mdc
index fece06b..aca8d19 100644
--- a/.cursor/rules/git-deploy.mdc
+++ b/.cursor/rules/git-deploy.mdc
@@ -34,4 +34,17 @@ REMOTE
 
 ## VM git access
 
-Deploy key (read-only) on `git.meshkee.com` for repo `Meshkee/backend`, installed as `/root/.ssh/id_ed25519` on the API VM. Remote should be SSH: `git@git.meshkee.com:Meshkee/backend.git`.
+Deploy key (read-only) on `git.meshkee.com` for repo `Meshkee/backend`, installed as `/root/.ssh/id_ed25519` on the API VM.
+
+Gitea SSH listens on **port 222** (not 22). The API VM must have `/root/.ssh/config`:
+
+```
+Host git.meshkee.com
+  HostName git.meshkee.com
+  User git
+  Port 222
+  IdentityFile /root/.ssh/id_ed25519
+  IdentitiesOnly yes
+```
+
+Remote URL: `git@git.meshkee.com:Meshkee/backend.git` (port comes from SSH config).
diff --git a/docs/DEPLOY.md b/docs/DEPLOY.md
index 650585f..aa1cd38 100644
--- a/docs/DEPLOY.md
+++ b/docs/DEPLOY.md
@@ -226,6 +226,8 @@ REMOTE
 
 Preserve `/opt/meshkee/app/.env` on the server. App remote must be SSH: `git@git.meshkee.com:Meshkee/backend.git` with the VM deploy key registered as a **read-only deploy key** on the repo.
 
+Gitea SSH is on **port 222**. On the API VM, `/root/.ssh/config` must set `Port 222` for `Host git.meshkee.com` (system SSH on 22 is not Gitea).
+
 ## Useful commands
 
 ```bash