diff --git a/hosts/containers/gitea/modules/gitea.nix b/hosts/containers/gitea/modules/gitea.nix
index bd9d1b79..60999467 100644
--- a/hosts/containers/gitea/modules/gitea.nix
+++ b/hosts/containers/gitea/modules/gitea.nix
@@ -44,6 +44,10 @@
         HOST = "mail.c3d2.de:465";
         IS_TLS_ENABLED = true;
       };
+      security = {
+        # needed for c3d2-{web,dns} deployment
+        DISABLE_GIT_HOOKS = false;
+      };
       service = {
         NO_REPLY_ADDRESS = "no_reply@c3d2.de";
         REGISTER_EMAIL_CONFIRM = true;
@@ -55,9 +59,6 @@
       time = {
         DEFAULT_UI_LOCATION = config.time.timeZone;
       };
-      custom = {
-        # needed for c3d2-{web,dns} deployment
-        DISABLE_GIT_HOOKS = false;
       };
     };
   };