diff --git a/containers/libreportal_catalog/libreportal_catalog.config b/containers/libreportal_catalog/libreportal_catalog.config
index b2e5db4b..8e9695fd 100644
--- a/containers/libreportal_catalog/libreportal_catalog.config
+++ b/containers/libreportal_catalog/libreportal_catalog.config
@@ -39,7 +39,7 @@ CFG_LIBREPORTAL_CATALOG_CATEGORY="system"
 CFG_LIBREPORTAL_CATALOG_TITLE="LibrePortal Catalog"
 CFG_LIBREPORTAL_CATALOG_DESCRIPTION="App Catalog & Registry"
 CFG_LIBREPORTAL_CATALOG_LONG_DESCRIPTION="Host your own signed LibrePortal app catalog — browse and add apps from your own instance."
-CFG_LIBREPORTAL_CATALOG_URL="https://git.libreportal.org/LibrePortal/LibrePortal"
+CFG_LIBREPORTAL_CATALOG_URL=""
 CFG_LIBREPORTAL_CATALOG_ACTIONS="configure|install|restart|shutdown|uninstall"
 #
 # =============================================================================
diff --git a/containers/libreportal_catalog/resources/site/index.html b/containers/libreportal_catalog/resources/site/index.html
index d3a95560..ab4754f1 100644
--- a/containers/libreportal_catalog/resources/site/index.html
+++ b/containers/libreportal_catalog/resources/site/index.html
@@ -275,8 +275,9 @@
   'use strict';
   var CHANNELS = ['stable', 'edge'];
   // The catalog repository submissions are opened against. Operators running
-  // their own catalog set this to their repo (a <meta name="lp-repo"> wins).
-  var REPO_URL = (document.querySelector('meta[name="lp-repo"]') || {}).content || 'https://git.libreportal.org/LibrePortal/LibrePortal';
+  // their own catalog set this via <meta name="lp-repo">; with none set the
+  // "Open the catalog repo" button is hidden rather than pointing nowhere.
+  var REPO_URL = (document.querySelector('meta[name="lp-repo"]') || {}).content || '';
 
   // The hash is either a view (#view=submit) or an app focus (#<slug>).
   function parseHash() {
@@ -395,7 +396,7 @@
       '<li>A maintainer reviews it (especially any <code>tools/*.sh</code> host scripts) for safety and quality.</li>' +
       '<li>Once approved it’s signed with the catalog key and published. It appears here — and in every box that scans this catalog — with a <strong>community</strong> badge and your name as the publisher.</li>' +
       '</ol></div>' +
-      '<div class="doc-card"><h2>Why a PR and not an upload?</h2><p>App definitions can ship host-side scripts that run near-root on people’s boxes. A reviewed, signed pull request keeps that trustworthy without accounts, moderation queues, or a server that could be coerced — the same reason boxes verify signatures instead of trusting this site.</p><a class="doc-cta" href="' + esc(REPO_URL) + '" target="_blank" rel="noopener noreferrer">Open the catalog repo ↗</a></div>' +
+      '<div class="doc-card"><h2>Why a PR and not an upload?</h2><p>App definitions can ship host-side scripts that run near-root on people’s boxes. A reviewed, signed pull request keeps that trustworthy without accounts, moderation queues, or a server that could be coerced — the same reason boxes verify signatures instead of trusting this site.</p>' + (REPO_URL ? '<a class="doc-cta" href="' + esc(REPO_URL) + '" target="_blank" rel="noopener noreferrer">Open the catalog repo ↗</a>' : '') + '</div>' +
       '<div class="doc-card"><h2>Status</h2><p>Community submissions are opening progressively — first-party apps are curated for now. Open submissions appear under <strong>Submissions</strong>.</p></div>' +
       '</div>';
   }