diff --git a/www/gitea/Makefile b/www/gitea/Makefile
index f0b9d24b29a2..9d61421b0223 100644
--- a/www/gitea/Makefile
+++ b/www/gitea/Makefile
@@ -1,77 +1,77 @@
 PORTNAME=	gitea
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.22.2
+DISTVERSION=	1.22.3
 CATEGORIES=	www
 MASTER_SITES=	https://github.com/go-gitea/gitea/releases/download/${DISTVERSIONPREFIX}${DISTVERSION}/ \
 		https://dl.gitea.io/gitea/${DISTVERSION}/
 DISTNAME=	gitea-src-${DISTVERSION}
 
 MAINTAINER=	stb@lassitu.de
 COMMENT=	Compact self-hosted Git service
 WWW=		https://gitea.io/en-US/
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	git:devel/git
 
 USES=		cpe gmake go:1.22,no_targets
 USE_RC_SUBR=	gitea
 
 EXTRACT_AFTER_ARGS=	--strip-components 1 # since 1.17.0, archive includes gitea-src-VERSION directory
 SUB_FILES+=	app.ini.sample pkg-message
 SUB_LIST+=	GITUSER=${USERS}
 
 NO_WRKSUBDIR=	yes
 
 USERS=		git
 GROUPS=		git
 
 PORTDATA=	*
 
 OPTIONS_DEFINE=	BINDATA GIT_LFS PAM SQLITE
 OPTIONS_DEFAULT=	GIT_LFS PAM SQLITE
 OPTIONS_SUB=	yes
 
 BINDATA_DESC=	Build a single monolithic binary, with all assets included
 GIT_LFS_DESC=	Support for Git Large File Storage (LFS)
 PAM_DESC=	Enable support for PAM
 
 BINDATA_VARS=	GO_TAGS+=bindata
 GIT_LFS_RUN_DEPENDS=	git-lfs:devel/git-lfs
 PAM_VARS=	GO_TAGS+=pam
 SQLITE_VARS=	GO_TAGS+="sqlite sqlite_unlock_notify"
 
 .include <bsd.port.options.mk>
 
 .if ${OPSYS} == FreeBSD
 DAEMONARGS=	-S -l \$${gitea_facility} -s \$${gitea_priority} -T \$${name}
 .else
 DAEMONARGS=	-f
 .endif
 
 SUB_LIST+=	DAEMONARGS="${DAEMONARGS}"
 
 SSP_UNSAFE=	true
 LDFLAGS+=	"'-X "code.gitea.io/gitea/modules/setting.CustomPath=${PREFIX}/etc/gitea"'"
 LDFLAGS+=	"'-X "code.gitea.io/gitea/modules/setting.AppWorkPath=${PREFIX}/share/gitea"'"
 MAKE_ARGS=	GOPATH=${WRKDIR} TAGS="${GO_TAGS}" GOFLAGS="-buildvcs=false"
 ALL_TARGET=	backend
 MAKE_JOBS_UNSAFE=	yes
 
 post-patch:
 	${ECHO_CMD} ${DISTVERSION} >${WRKSRC}/VERSION
 
 # Too lazy to figure out why go install won't work.
 do-install:
 	# Go binary is statically linked and cannot be stripped, so use
 	# INSTALL_SCRIPT.
 	${INSTALL_SCRIPT} ${WRKSRC}/gitea ${STAGEDIR}${PREFIX}/sbin
 	@${MKDIR} ${STAGEDIR}${ETCDIR}/conf
 	${INSTALL_DATA} ${WRKDIR}/app.ini.sample ${STAGEDIR}${ETCDIR}/conf/app.ini.sample
 	${INSTALL_DATA} ${WRKSRC}/custom/conf/app.example.ini ${STAGEDIR}${ETCDIR}/conf/app.ini.defaults
 
 do-install-BINDATA-off:
 	cd ${WRKSRC} && ${COPYTREE_SHARE} "options public templates" ${STAGEDIR}${DATADIR}
 
 .include <bsd.port.mk>
diff --git a/www/gitea/distinfo b/www/gitea/distinfo
index 4deeecdab0ed..4058ff2276dc 100644
--- a/www/gitea/distinfo
+++ b/www/gitea/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1725555216
-SHA256 (gitea-src-1.22.2.tar.gz) = 8c2f2cdac0b0403dfe99198064fcc1cd92c560e31072e550da3fc9c49a22c05d
-SIZE (gitea-src-1.22.2.tar.gz) = 54444512
+TIMESTAMP = 1728456289
+SHA256 (gitea-src-1.22.3.tar.gz) = 226291c16bc750c5d8953a7c16858ec5e8d87751308d25ffbbe75210f45215c2
+SIZE (gitea-src-1.22.3.tar.gz) = 54325752
diff --git a/www/gitea/files/gitea.in b/www/gitea/files/gitea.in
index 566a4b46ef93..3b1814b25fb9 100644
--- a/www/gitea/files/gitea.in
+++ b/www/gitea/files/gitea.in
@@ -1,65 +1,65 @@
 #!/bin/sh
 
 # PROVIDE: gitea
 # REQUIRE: NETWORKING SYSLOG
 # KEYWORD: shutdown
 #
 # Add the following lines to /etc/rc.conf to enable gitea:
 #
 #gitea_enable="YES"
 
 . /etc/rc.subr
 
 name="gitea"
 rcvar="gitea_enable"
 
 load_rc_config $name
 
 : ${gitea_user:="%%GITUSER%%"}
 : ${gitea_enable:="NO"}
 : ${gitea_configcheck_enable:="YES"}
 : ${gitea_facility:="daemon"}
 : ${gitea_priority:="info"}
 : ${gitea_shared:="%%PREFIX%%/share/${name}"}
 : ${gitea_custom:="%%PREFIX%%/etc/${name}"}
 
 command="%%PREFIX%%/sbin/${name} web"
 procname="%%PREFIX%%/sbin/${name}"
 githome="$(eval echo ~${gitea_user})"
 
 pidfile="/var/run/${name}.pid"
 
 start_cmd="${name}_start"
 start_precmd="${name}_prestart"
 
 gitea_start() {
 	for d in /var/db/gitea /var/log/gitea; do
 		if [ ! -e "$d" ]; then
 			mkdir "$d"
 			chown ${gitea_user} "$d"
 		fi
 	done
 	/usr/sbin/daemon %%DAEMONARGS%% \
 		-u ${gitea_user} -p ${pidfile} \
 		/usr/bin/env -i \
 		"GITEA_WORK_DIR=${gitea_shared}" \
 		"GITEA_CUSTOM=${gitea_custom}" \
 		"HOME=${githome}" \
 		"PATH=%%PREFIX%%/bin:${PATH}" \
 		"USER=${gitea_user}" \
 		$command
 }
 
 gitea_prestart() {
 	if checkyesno gitea_configcheck_enable; then
-		if su -m ${gitea_user} -c "%%PREFIX%%/sbin/${name} doctor check >/dev/null"; then
+		if su ${gitea_user} -c "%%PREFIX%%/sbin/${name} doctor check >/dev/null"; then
 		else
 			echo "cannot start ${name} because of configuration errors. Run" >&2
 			echo "    su -m git -c '${name} doctor check'" >&2
 			echo "for further details"
 			return 1
 		fi
 	fi
 }
 
 run_rc_command "$1"