diff --git a/stacks/kms/main.tf b/stacks/kms/main.tf
index fd2db35f..1d2fadda 100644
--- a/stacks/kms/main.tf
+++ b/stacks/kms/main.tf
@@ -54,7 +54,7 @@ resource "kubernetes_deployment" "kms-web-page" {
           name = "registry-credentials"
         }
         container {
-          image             = "forgejo.viktorbarzin.me/viktor/kms-website:${var.image_tag}"
+          image             = "ghcr.io/viktorbarzin/kms-website:${var.image_tag}"
           name              = "kms-web-page"
           image_pull_policy = "IfNotPresent"
           resources {
diff --git a/stacks/kms/variables.tf b/stacks/kms/variables.tf
index d36ff6c7..c71d4e4b 100644
--- a/stacks/kms/variables.tf
+++ b/stacks/kms/variables.tf
@@ -1,5 +1,5 @@
 variable "image_tag" {
   type        = string
   default     = "latest"
-  description = "kms-website image tag pushed to forgejo.viktorbarzin.me/viktor/kms-website. Use 8-char git SHA in CI."
+  description = "kms-website image tag pushed to ghcr.io/viktorbarzin/kms-website (ADR-0002 off-infra builds). Use 8-char git SHA in CI."
 }