diff --git a/terraform/gandi.nix b/terraform/gandi.nix
index bf15194..cf7d7fe 100644
--- a/terraform/gandi.nix
+++ b/terraform/gandi.nix
@@ -63,11 +63,15 @@ in
       (dualProxyRecords "gerrit01.infra" 3600 "AAAA" ["2001:bc8:38ee:100:1000::10"])
       (dualProxyRecords "meta01.infra" 3600 "AAAA" ["2001:bc8:38ee:100:1000::20"])
       (dualProxyRecords "fodwatch.infra" 3600 "AAAA" ["2001:bc8:38ee:100:1000::30"])
-      (dualProxyRecords "git.infra" 3600 "AAAA" ["2001:bc8:38ee:100:1000::40"])
+      # git.infra.forkos.org exposes opensshd
+      (dualProxyRecords "git.infra" 3600 "AAAA" ["2001:bc8:38ee:100:1000::41"])
+      # git.p.forkos.org exposes forgejo ssh server.
+      (proxyRecords "git.p" 3600 "AAAA" ["2001:bc8:38ee:100:1000::40"])
 
       (record "cl" 3600 "CNAME" ["gerrit01.infra.p"])
       (record "fodwatch" 3600 "CNAME" ["fodwatch.infra.p"])
-      (record "git" 3600 "CNAME" ["git.infra.p"])
+      # git.p.forkos.org is the proxy variant of the Forgejo server.
+      (record "git" 3600 "CNAME" ["git.p"])
       (record "netbox" 3600 "CNAME" ["meta01.infra.p"])
       (record "amqp" 3600 "CNAME" ["bagel-box.infra.p"])
       (record "grafana" 3600 "CNAME" ["meta01.infra.p"])