diff --git a/.gitea/workflows/renovate.yml b/.gitea/workflows/renovate.yml
index 730638f..3ee33fa 100644
--- a/.gitea/workflows/renovate.yml
+++ b/.gitea/workflows/renovate.yml
@@ -176,9 +176,13 @@ jobs:
             exit 1
           fi
 
+          # Force git clone base URL to the selected endpoint host/port.
+          # This avoids relying on platform-advertised clone URLs that may point to an unreachable external proxy.
+          export RENOVATE_GIT_URL="${BASE_ENDPOINT}/"
           export RENOVATE_ENDPOINT="${BASE_ENDPOINT}"
           echo "Renovate endpoint (primary): ${RENOVATE_ENDPOINT}"
           echo "Renovate endpoint (fallback): ${RENOVATE_ENDPOINT_EXTERNAL}"
+          echo "Renovate git base URL override: ${RENOVATE_GIT_URL}"
           echo "Preflight API endpoint: ${API_ENDPOINT}"
 
           PLATFORM_VERSION=""
@@ -292,6 +296,7 @@ jobs:
               -e NODE_TLS_REJECT_UNAUTHORIZED \
               -e GIT_SSL_NO_VERIFY=1 \
               -e RENOVATE_TOKEN \
+              -e RENOVATE_GIT_URL \
               -e RENOVATE_HOST_RULES \
               -e RENOVATE_X_PLATFORM_VERSION \
               -e RENOVATE_PLATFORM \
@@ -305,6 +310,7 @@ jobs:
               "${RENOVATE_IMAGE}" \
               --platform "${RENOVATE_PLATFORM}" \
               --endpoint "${RENOVATE_ENDPOINT}" \
+              --git-url "${RENOVATE_GIT_URL}" \
               --git-author "${RENOVATE_GIT_AUTHOR}" \
               --onboarding="${RENOVATE_ONBOARDING}" \
               --pr-concurrent-limit "${RENOVATE_PR_CONCURRENT_LIMIT}" \