diff --git a/iso/pacman.conf b/iso/pacman.conf
index 8ec5fd6..6863265 100644
--- a/iso/pacman.conf
+++ b/iso/pacman.conf
@@ -36,6 +36,8 @@ Include = /etc/pacman.d/mirrorlist
 # TODO: packages are currently unsigned (TrustAll). For production, sign
 # them in CI with a GPG key and switch to SigLevel = Required.
 # -----------------------------------------------------------------------
-[breadway]
+# The section name must match Forgejo's served db filename
+# ({owner}.{group}.{domain}.db) — pacman fetches "<section>.db" from Server.
+[Breadway.os.git.breadway.dev]
 SigLevel = Optional TrustAll
 Server = https://git.breadway.dev/api/packages/Breadway/arch/os/$arch