diff --git a/clusters/dev/kustomization.yaml b/clusters/dev/kustomization.yaml
index 09e4dbe..1fe6ca4 100644
--- a/clusters/dev/kustomization.yaml
+++ b/clusters/dev/kustomization.yaml
@@ -45,9 +45,10 @@ patches:
         namespace: flux-system
       spec:
         # Phase-1 bootstrap source: a single Gitea container on the HOST (bootstrap/gitea/),
-        # reachable from the cluster on the k3s-dev NAT gateway. PUBLIC repo => Flux needs no
-        # creds (NAT-only). Phase 6 cutover -> in-cluster gitea.home.keithjackson.dev (docs/05).
-        url: http://10.73.0.1:3000/Home-Network/home-network-k3s-impl.git
+        # reachable from the Proxmox nodes at 192.168.2.103 (the Proxmox dev-host address).
+        # PUBLIC repo => Flux needs no creds. Phase 6 cutover -> in-cluster
+        # gitea.home.keithjackson.dev (docs/05).
+        url: http://192.168.2.103:3000/Home-Network/home-network-k3s-impl.git
         ref:
           branch: main
   # --- dev-scoped cluster-vars (R-ENV-02) ---
diff --git a/platform/cilium/helmrelease.yaml b/platform/cilium/helmrelease.yaml
index 26d4ea0..d18b2ba 100644
--- a/platform/cilium/helmrelease.yaml
+++ b/platform/cilium/helmrelease.yaml
@@ -45,9 +45,9 @@ spec:
     # [parity] MUST equal Ansible: kubeProxyReplacement: true
     kubeProxyReplacement: true
     # [parity] MUST equal Ansible: k8sServiceHost/k8sServicePort = the k3s API endpoint
-    # (k3s_api_host/k3s_api_port). This is the primary control-plane node IP. Setting these
-    # wrong (e.g. the old "REPLACE-ME") breaks Cilium's connection to the API server on adopt.
-    k8sServiceHost: "10.73.0.11"
+    # (k3s_api_host/k3s_api_port). This is the primary control-plane node IP (192.168.1.50).
+    # Setting these wrong breaks Cilium's connection to the API server on adopt.
+    k8sServiceHost: "192.168.1.50"
     k8sServicePort: 6443
     # --- Gateway API (ingress; replaces Traefik) — docs/09, ADR-0002 ---
     # [parity] MUST equal Ansible: gatewayAPI.enabled: true
diff --git a/platform/cilium/values.yaml b/platform/cilium/values.yaml
index f7b8f16..b6f03e4 100644
--- a/platform/cilium/values.yaml
+++ b/platform/cilium/values.yaml
@@ -13,7 +13,7 @@
 # [parity] k3s kube-proxy disabled → Cilium replaces it (ADR-0001/0002)
 kubeProxyReplacement: true
 # [parity] = the k3s API endpoint (primary control-plane node IP) + port
-k8sServiceHost: "10.73.0.11"
+k8sServiceHost: "192.168.1.50"
 k8sServicePort: 6443
 # [parity] ingress via Gateway API, no Traefik (docs/09)
 gatewayAPI: