diff --git a/module.nix b/module.nix
index e7204f5..ef91e92 100644
--- a/module.nix
+++ b/module.nix
@@ -137,11 +137,15 @@ let
     		file_server
     	}
 
-    	# `fdroid update` writes repo/index.html: the repo's own landing
-    	# page, listing every app and carrying the QR code that adds the
-    	# repo to a phone. Better than anything hand-written here, and it
-    	# can never fall out of step with the index.
-    	redir / /fdroid/repo/ permanent
+    	# No redirect from /. The apex is being given its own content, so it
+    	# cannot be spent forwarding to the repo; the short, typeable way in
+    	# is a separate name that redirects here (fdroid.randogoth.com, in
+    	# bucur's modules/services/fdroid.nix). Until that content lands the
+    	# apex falls through to the 404 below, which is deliberate.
+    	#
+    	# repo/index.html, which `fdroid update` writes, is still the repo's
+    	# landing page and still reachable at /fdroid/repo/ -- the address the
+    	# signed index names and the one clients subscribe to.
 
     	# Caddy answers a request that matched no route with an empty 200, so
     	# without this every stray path — /config.yml included — looks like a