diff --git a/ops/git.yaml b/ops/git.yaml
index 0e145f1..c0aa77f 100644
--- a/ops/git.yaml
+++ b/ops/git.yaml
@@ -137,5 +137,8 @@ spec:
           REPO_INDEXER_ENABLED: true
         server:
           SSH_PORT: 60022
+          # Git LFS over pure SSH (no HTTP). LFS_ALLOW_PURE_SSH needs Gitea >= 1.21.
+          LFS_START_SERVER: true
+          LFS_ALLOW_PURE_SSH: true
       admin:
         existingSecret: gitea-admin-secret
\ No newline at end of file