diff --git a/stages/delivery/.envs/.forgejo-oidc-secret.template b/stages/delivery/.envs/.forgejo-oidc-secret.template
index 4540407..10cb1c2 100644
--- a/stages/delivery/.envs/.forgejo-oidc-secret.template
+++ b/stages/delivery/.envs/.forgejo-oidc-secret.template
@@ -1 +1 @@
-{{ pw "46289080-39de-4e5e-bae5-6be41b08e25b" }}
\ No newline at end of file
+{{ pw "1a13caa1-547e-4462-af34-8dff29baec64" }}
diff --git a/stages/delivery/values/forgejo.values.yaml.gotmpl b/stages/delivery/values/forgejo.values.yaml.gotmpl
index 4ee271b..76d6372 100644
--- a/stages/delivery/values/forgejo.values.yaml.gotmpl
+++ b/stages/delivery/values/forgejo.values.yaml.gotmpl
@@ -14,7 +14,7 @@ gitea:
       key: VcyEM48aqaMlau356WMVO10cNcmd6McnxW1KvBLu
       secret: {{ readFile "../.envs/.forgejo-oidc-secret" }}
       autoDiscoverUrl: https://idp.kropcloud.net/application/o/git/.well-known/openid-configuration
-      skipLocal2fa: true
+      skipLocal2fa: false
       scopes: forgejo
       requiredClaimName: forgejo
       groupClaimName: forgejo
@@ -67,4 +67,4 @@ service:
   ssh:
     type: LoadBalancer
     annotations:
-      metallb.io/allow-shared-ip: kropcloud
\ No newline at end of file
+      metallb.io/allow-shared-ip: kropcloud