diff --git a/ControlPlane.AppHost/AppHost.cs b/ControlPlane.AppHost/AppHost.cs
index 054de2e..e73375d 100644
--- a/ControlPlane.AppHost/AppHost.cs
+++ b/ControlPlane.AppHost/AppHost.cs
@@ -87,6 +87,9 @@ builder.AddProject<Projects.ControlPlane_Worker>("controlplane-worker")
     .WithEnvironment("ConnectionStrings__platformdb",
         "Host=localhost;Port=5432;Username=postgres;Password=postgres")
     .WithEnvironment("Build__WorkDir", buildWorkDir)
+    .WithEnvironment("Gitea__BaseUrl", "https://opc.clarity.test")
+    .WithEnvironment("Gitea__Owner",   "ClarityStack")
+    .WithEnvironment("Gitea__Token",   "fcf9f66415754fb639a8343e3904e06b1d78c646")
     .WithReference(controlPlaneDb)
     .WaitFor(controlPlaneDb);
 #endregion
diff --git a/ControlPlane.Worker/appsettings.json b/ControlPlane.Worker/appsettings.json
index 33f7130..4751bbb 100644
--- a/ControlPlane.Worker/appsettings.json
+++ b/ControlPlane.Worker/appsettings.json
@@ -26,6 +26,14 @@
     "ContainerAddress": "http://vault:8200"
   },
 
+  // ── Gitea ─────────────────────────────────────────────────────────────────────
+  // Used by BuildConsumer to post commit statuses and clone repos.
+  "Gitea": {
+    "BaseUrl": "https://opc.clarity.test",
+    "Owner":   "ClarityStack",
+    "Token":   "fcf9f66415754fb639a8343e3904e06b1d78c646"
+  },
+
   // ── ClarityInfraOptions (Clarity section) ─────────────────────────────────────
   // These values describe what gets injected INTO tenant containers at docker run time.
   // Containers live on clarity-net → use Docker DNS names (keycloak, vault, postgres).