diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 0201279..bf7ad2e 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -3,7 +3,7 @@ stages:
   - deploy
 
 variables:
-  GIT_STRATEGY: none # Matikan auto-clone bawaan runner helper yang menolak TLS
+  GIT_STRATEGY: none
   IMAGE: 10.15.39.186:8083/eosbpkd/sidata
   TAG: $CI_COMMIT_SHORT_SHA
   KUBE_NAMESPACE: sidata-prod
@@ -27,9 +27,9 @@ build:
   tags:
     - skpp
   before_script:
-    - echo '0. FETCHING CODE MANUALLY VIA INTERNAL HTTP'
+    - echo '0. FETCHING CODE MANUALLY VIA HTTP WITH CI_JOB_TOKEN'
     - git config --global http.sslVerify false
-    - git clone http://gitlab-external-svc.default.svc.cluster.local/izuddin/sidata.git . || git clone http://10.15.39.187/izuddin/sidata.git .
+    - git clone http://gitlab-ci-token:${CI_JOB_TOKEN}@10.15.39.187/izuddin/sidata.git . || git clone https://gitlab-ci-token:${CI_JOB_TOKEN}@gitlab.dashboard-bpkd.drc-bpkd.data-center.id/izuddin/sidata.git .
     - git checkout $CI_COMMIT_SHA
   script:
     - echo '1. MENERAPKAN PENGATURAN REGISTRY'
@@ -71,13 +71,12 @@ deploy:
     entrypoint: [""]
   tags:
     - skpp
-before_script:
+  before_script:
     - echo '0. FETCHING CODE MANUALLY VIA HTTP WITH CI_JOB_TOKEN'
     - git config --global http.sslVerify false
-    # Menggunakan CI_JOB_TOKEN bawaan GitLab agar tidak meminta login/password
     - git clone http://gitlab-ci-token:${CI_JOB_TOKEN}@10.15.39.187/izuddin/sidata.git . || git clone https://gitlab-ci-token:${CI_JOB_TOKEN}@gitlab.dashboard-bpkd.drc-bpkd.data-center.id/izuddin/sidata.git .
     - git checkout $CI_COMMIT_SHA
-script:
+  script:
     - echo '1. SETUP KUBECONFIG LOKAL & BYPASS PROXY'
     - unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY
     - export NO_PROXY="*"