diff --git a/.gitea/workflows/docker.yml b/.gitea/workflows/docker.yml
index a403443..2dede31 100644
--- a/.gitea/workflows/docker.yml
+++ b/.gitea/workflows/docker.yml
@@ -23,7 +23,7 @@ jobs:
       - name: Login to Gitea Registry
         uses: docker/login-action@v3
         with:
-          registry: git.shts.su
+          registry: git.shx.one
           username: ${{ gitea.actor }}
           password: ${{ secrets.ACTIONS_PAT }}
 
@@ -43,7 +43,7 @@ jobs:
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: git.shts.su/${{ gitea.repository }}
+          images: git.shx.one/${{ gitea.repository }}
           tags: |
             type=semver,pattern={{version}}
             type=raw,value=latest,enable=${{ gitea.ref_name == 'main' }}
@@ -59,8 +59,8 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           build-args: |
             NODE_VERSION=22.23.0-bookworm-slim
-          cache-from: type=registry,ref=git.shts.su/${{ gitea.repository }}:buildcache
-          cache-to: type=registry,ref=git.shts.su/${{ gitea.repository }}:buildcache,mode=max
+          cache-from: type=registry,ref=git.shx.one/${{ gitea.repository }}:buildcache
+          cache-to: type=registry,ref=git.shx.one/${{ gitea.repository }}:buildcache,mode=max
           provenance: true
 
   create-release:
@@ -95,7 +95,7 @@ jobs:
             "tag_name": "${VERSION}",
             "target_commitish": "${{ gitea.sha }}",
             "name": "Auth Portal ${VERSION}",
-            "body": "## Auth Portal ${VERSION}\n\n### Docker\n\n\`\`\`bash\ndocker pull git.shts.su/${{ gitea.repository }}:${VERSION}\ndocker run -d -p 8080:8080 -v ./data:/data --name auth-portal git.shts.su/${{ gitea.repository }}:${VERSION}\n\`\`\`\n\n### Changelog\n\n${{ steps.changelog.outputs.CHANGELOG }}",
+            "body": "## Auth Portal ${VERSION}\n\n### Docker\n\n\`\`\`bash\ndocker pull git.shx.one/${{ gitea.repository }}:${VERSION}\ndocker run -d -p 8080:8080 -v ./data:/data --name auth-portal git.shx.one/${{ gitea.repository }}:${VERSION}\n\`\`\`\n\n### Changelog\n\n${{ steps.changelog.outputs.CHANGELOG }}",
             "draft": false,
             "prerelease": false
           }
diff --git a/README.md b/README.md
index 0aee8d8..a62db2e 100644
--- a/README.md
+++ b/README.md
@@ -54,7 +54,7 @@ pnpm dlx shadcn@latest add @reui/auth-13 --yes
 
 - Workflow: `.gitea/workflows/docker.yml` (как CFDM)
 - Secrets: `ACTIONS_PAT`, `GITEA_TOKEN`
-- Образ: `git.shts.su/denozord/auth-portal`
+- Образ: `git.shx.one/denozord/auth-portal`
 
 Локально / без reverse proxy:
 
diff --git a/deploy/docker-compose.traefik.yml b/deploy/docker-compose.traefik.yml
index b3ec80b..4d1d8a7 100644
--- a/deploy/docker-compose.traefik.yml
+++ b/deploy/docker-compose.traefik.yml
@@ -5,7 +5,7 @@
 #   mkdir -p /opt/auth-portal/data
 #   cp deploy/docker-compose.traefik.yml /opt/auth-portal/docker-compose.yml
 #   cp deploy/env.traefik.example /opt/auth-portal/.env   # fill secrets
-#   docker login git.shts.su
+#   docker login git.shx.one
 #   cd /opt/auth-portal && docker compose pull && docker compose up -d
 
 services:
@@ -49,7 +49,7 @@ services:
         max-file: "3"
 
   app:
-    image: git.shts.su/denozord/auth-portal:${AUTH_IMAGE_TAG:-latest}
+    image: git.shx.one/denozord/auth-portal:${AUTH_IMAGE_TAG:-latest}
     pull_policy: always
     container_name: auth-portal
     restart: unless-stopped
diff --git a/docs/deploy-traefik.md b/docs/deploy-traefik.md
index b256b77..ff997dc 100644
--- a/docs/deploy-traefik.md
+++ b/docs/deploy-traefik.md
@@ -2,7 +2,7 @@
 
 Один стек: **Traefik** (HTTPS, Let's Encrypt DNS-01 через Cloudflare) + **auth-portal** (API + SPA, SQLite).
 
-Образ приложения: `git.shts.su/denozord/auth-portal`  
+Образ приложения: `git.shx.one/denozord/auth-portal`  
 Публичный URL: `https://auth.shnt.top`  
 Compose: [`deploy/docker-compose.traefik.yml`](../deploy/docker-compose.traefik.yml)  
 Env-шаблон: [`deploy/env.traefik.example`](../deploy/env.traefik.example)
@@ -20,7 +20,7 @@ Internet → :80/:443 (Traefik) → auth-portal:8080
 1. Зона домена в Cloudflare (например `shnt.top`).
 2. Docker Engine + Compose plugin на VPS.
 3. Свободные порты **80** и **443** на хосте (этот стек сам поднимает Traefik).
-4. `docker login git.shts.su`.
+4. `docker login git.shx.one`.
 
 > Если на сервере уже крутится другой Traefik на 80/443 — либо остановите его, либо смените `TRAEFIK_HTTP_PORT` / `TRAEFIK_HTTPS_PORT` (и проброс снаружи). Два Traefik на одних портах не запустятся.
 
@@ -66,9 +66,9 @@ cd /opt/auth-portal
 #   deploy/env.traefik.example → .env
 
 curl -fsSL -o docker-compose.yml \
-  https://git.shts.su/denozord/auth-portal/raw/branch/main/deploy/docker-compose.traefik.yml
+  https://git.shx.one/denozord/auth-portal/raw/branch/main/deploy/docker-compose.traefik.yml
 curl -fsSL -o .env \
-  https://git.shts.su/denozord/auth-portal/raw/branch/main/deploy/env.traefik.example
+  https://git.shx.one/denozord/auth-portal/raw/branch/main/deploy/env.traefik.example
 
 nano .env   # заполнить секреты
 ```
@@ -107,7 +107,7 @@ curl -fsS https://auth.shnt.top/.well-known/jwks.json | head
 
 ```bash
 cd /opt/auth-portal
-docker login git.shts.su
+docker login git.shx.one
 docker compose pull
 docker compose up -d
 docker compose ps