diff --git a/deploy/gitea-a11y/README.md b/deploy/gitea-a11y/README.md
new file mode 100644
index 00000000..b03dc2f1
--- /dev/null
+++ b/deploy/gitea-a11y/README.md
@@ -0,0 +1,64 @@
+# Gitea Accessibility Fixes
+
+Custom template overrides for WCAG 2.1 AA compliance on the Timmy Foundation Forge.
+
+Applied fixes identified by the accessibility audit (#492):
+
+| Fix | Issue | WCAG | Description |
+|-----|-------|------|-------------|
+| R1 | #551 | Best Practice | Password visibility toggle (eye icon) on sign-in page |
+| R2 | #552 | 3.3.1 | `aria-required="true"` on required form fields |
+| R3 | #553 | 4.1.2 | `aria-label` on star/fork count links ("2 stars", "0 forks") |
+| R4 | #554 | 1.3.1 | `<time datetime="...">` elements for relative timestamps |
+
+## Structure
+
+```
+deploy/gitea-a11y/
+├── deploy-gitea-a11y.sh          # Deployment script
+├── README.md
+└── custom/
+    ├── public/
+    │   ├── css/
+    │   └── js/
+    └── templates/
+        ├── custom/
+        │   └── time_relative.tmpl    # R4: <time> helper
+        ├── repo/
+        │   └── list_a11y.tmpl        # R3: aria-label on counts
+        └── user/auth/
+            └── signin_inner.tmpl     # R1+R2: password toggle + aria-required
+```
+
+## Deploy
+
+```bash
+bash deploy/gitea-a11y/deploy-gitea-a11y.sh
+# or to a specific host:
+bash deploy/gitea-a11y/deploy-gitea-a11y.sh root@my-gitea-host.com
+```
+
+## Template Overrides
+
+Gitea supports custom template overrides by placing files in `custom/templates/`.
+The templates here override the default Gitea templates with a11y improvements.
+
+### R1: Password Visibility Toggle
+
+Adds an eye icon (👁) button next to the password field that toggles between
+`type="password"` and `type="text"`. Updates `aria-label` dynamically.
+
+### R2: aria-required
+
+Adds `aria-required="true"` to the username and password inputs, which
+properly communicates required state to screen readers.
+
+### R3: Star/Fork aria-label
+
+Wraps star and fork count links with `aria-label="2 stars"` so screen
+readers announce the meaning, not just the number.
+
+### R4: `<time>` Elements
+
+Wraps relative timestamps ("2 minutes ago") in `<time datetime="2026-04-13T17:00:00Z">`
+providing both human-readable text and machine-readable ISO 8601 dates.
diff --git a/deploy/gitea-a11y/custom/templates/custom/time_relative.tmpl b/deploy/gitea-a11y/custom/templates/custom/time_relative.tmpl
new file mode 100644
index 00000000..dc40a471
--- /dev/null
+++ b/deploy/gitea-a11y/custom/templates/custom/time_relative.tmpl
@@ -0,0 +1,43 @@
+{{/*
+  Gitea a11y fix: R4 — <time> elements for relative timestamps
+
+  Provides a reusable template helper that wraps relative timestamps
+  in <time datetime="..."> elements with machine-readable ISO 8601 dates.
+
+  Usage in templates:
+    {{template "custom/time_relative" (dict "Time" .CreatedUnix "Relative" .CreatedRelative)}}
+
+  Deploy to: custom/templates/custom/time_relative.tmpl
+*/}}
+
+{{/* Renders a timestamp as <time> with both relative text and machine-readable datetime */}}
+{{define "custom/time_relative"}}
+{{if and .Time .Relative}}
+<time datetime="{{.Time.Format "2006-01-02T15:04:05Z07:00"}}" title="{{.Time.Format "Jan 02, 2006 15:04"}}">
+  {{.Relative}}
+</time>
+{{else if .Relative}}
+<span>{{.Relative}}</span>
+{{end}}
+{{end}}
+
+{{/*
+  Alternative: render from Unix timestamp
+  Usage: {{template "custom/time_from_unix" (dict "Unix" .CreatedUnix "Relative" .CreatedRelative)}}
+*/}}
+{{define "custom/time_from_unix"}}
+{{if .Relative}}
+<time datetime="" data-unix="{{.Unix}}" title="">{{.Relative}}</time>
+<script>
+(function() {
+  var el = document.currentScript.previousElementSibling;
+  var unix = parseInt(el.getAttribute('data-unix'));
+  if (unix) {
+    var d = new Date(unix * 1000);
+    el.setAttribute('datetime', d.toISOString());
+    el.setAttribute('title', d.toLocaleString());
+  }
+})();
+</script>
+{{end}}
+{{end}}
diff --git a/deploy/gitea-a11y/custom/templates/repo/list_a11y.tmpl b/deploy/gitea-a11y/custom/templates/repo/list_a11y.tmpl
new file mode 100644
index 00000000..3fb5021c
--- /dev/null
+++ b/deploy/gitea-a11y/custom/templates/repo/list_a11y.tmpl
@@ -0,0 +1,27 @@
+{{/*
+  Gitea a11y fix: R3 — aria-label on star/fork count links
+
+  Override snippet for repo list items.
+  Wraps star/fork counts with descriptive aria-labels.
+
+  This is a partial template to be included where repo lists render.
+  Apply via: {{template "custom/repo/list_a11y" .}}
+
+  Deploy to: custom/templates/repo/list_a11y.tmpl
+*/}}
+
+{{/* Star count link with aria-label */}}
+<a class="repo-card-star" href="{{.RepoLink}}/stars" aria-label="{{.NumStars}} stars" title="{{.NumStars}} stars">
+  <svg class="octicon octicon-star" viewBox="0 0 16 16" width="16" height="16" aria-hidden="true">
+    <path d="M8 .25a.75.75 0 01.673.418l1.882 3.815 4.21.612a.75.75 0 01.416 1.279l-3.046 2.97.719 4.192a.75.75 0 01-1.088.791L8 12.347l-3.766 1.98a.75.75 0 01-1.088-.79l.72-4.194L.818 6.374a.75.75 0 01.416-1.28l4.21-.611L7.327.668A.75.75 0 018 .25z"/>
+  </svg>
+  <span>{{.NumStars}}</span>
+</a>
+
+{{/* Fork count link with aria-label */}}
+<a class="repo-card-fork" href="{{.RepoLink}}/forks" aria-label="{{.NumForks}} forks" title="{{.NumForks}} forks">
+  <svg class="octicon octicon-repo-forked" viewBox="0 0 16 16" width="16" height="16" aria-hidden="true">
+    <path d="M5 5.372v.878c0 .414.336.75.75.75h4.5a.75.75 0 00.75-.75v-.878a2.25 2.25 0 111.5 0v.878a2.25 2.25 0 01-2.25 2.25h-1.5v2.128a2.251 2.251 0 11-1.5 0V8.5h-1.5A2.25 2.25 0 013.5 6.25v-.878a2.25 2.25 0 111.5 0zM5 3.25a.75.75 0 10-1.5 0 .75.75 0 001.5 0zm6.75.75a.75.75 0 100-1.5.75.75 0 000 1.5zm-3 8.75a.75.75 0 10-1.5 0 .75.75 0 001.5 0z"/>
+  </svg>
+  <span>{{.NumForks}}</span>
+</a>
diff --git a/deploy/gitea-a11y/custom/templates/user/auth/signin_inner.tmpl b/deploy/gitea-a11y/custom/templates/user/auth/signin_inner.tmpl
new file mode 100644
index 00000000..8baec224
--- /dev/null
+++ b/deploy/gitea-a11y/custom/templates/user/auth/signin_inner.tmpl
@@ -0,0 +1,96 @@
+{{/*
+  Gitea a11y fix: R1 — Password visibility toggle + R2 — aria-required
+
+  Override of user/auth/signin_inner.tmpl
+  Adds:
+  - Eye icon toggle to show/hide password content
+  - aria-required="true" on required fields
+  - Proper label associations
+
+  Deploy to: custom/templates/user/auth/signin_inner.tmpl
+*/}}
+{{template "base/head" .}}
+<div class="page-content container">
+  <div class="signin">
+    <h1>{{.locale.Tr "sign_in"}}</h1>
+
+    <form action="{{AppSubUrl}}/user/login" method="post">
+      {{.CsrfTokenHtml}}
+
+      {{/* a11y R2: aria-required on username field */}}
+      <div class="field">
+        <label for="user_name">{{.locale.Tr "username"}}</label>
+        <input
+          id="user_name"
+          name="user_name"
+          type="text"
+          value="{{.user_name}}"
+          autofocus
+          required
+          aria-required="true"
+          autocomplete="username"
+          placeholder="{{.locale.Tr "username"}}"
+        />
+      </div>
+
+      {{/* a11y R1: Password field with visibility toggle */}}
+      <div class="field" style="position:relative">
+        <label for="password">{{.locale.Tr "password"}}</label>
+        <div style="display:flex;align-items:center;position:relative">
+          <input
+            id="password"
+            name="password"
+            type="password"
+            required
+            aria-required="true"
+            autocomplete="current-password"
+            placeholder="{{.locale.Tr "password"}}"
+            style="flex:1;padding-right:36px"
+          />
+          <button
+            type="button"
+            id="toggle-password"
+            aria-label="Show password"
+            title="Show password"
+            style="position:absolute;right:8px;background:none;border:none;cursor:pointer;padding:4px;color:#666;font-size:16px"
+            onclick="togglePasswordVisibility()"
+          >👁</button>
+        </div>
+      </div>
+
+      <div class="field">
+        <button type="submit" class="ui green button">
+          {{.locale.Tr "sign_in"}}
+        </button>
+      </div>
+
+      {{if .EnableOAuth2}}
+      <div class="ui divider"></div>
+      <div class="field">
+        <a href="{{AppSubUrl}}/user/oauth2" class="ui basic button">
+          {{.locale.Tr "sign_in_with_provider"}}
+        </a>
+      </div>
+      {{end}}
+    </form>
+  </div>
+</div>
+
+<script>
+function togglePasswordVisibility() {
+  const input = document.getElementById('password');
+  const btn = document.getElementById('toggle-password');
+  if (input.type === 'password') {
+    input.type = 'text';
+    btn.textContent = '🙈';
+    btn.setAttribute('aria-label', 'Hide password');
+    btn.setAttribute('title', 'Hide password');
+  } else {
+    input.type = 'password';
+    btn.textContent = '👁';
+    btn.setAttribute('aria-label', 'Show password');
+    btn.setAttribute('title', 'Show password');
+  }
+}
+</script>
+{{template "base/footer" .}}
diff --git a/deploy/gitea-a11y/deploy-gitea-a11y.sh b/deploy/gitea-a11y/deploy-gitea-a11y.sh
new file mode 100755
index 00000000..310837b0
--- /dev/null
+++ b/deploy/gitea-a11y/deploy-gitea-a11y.sh
@@ -0,0 +1,57 @@
+#!/bin/bash
+# deploy-gitea-a11y.sh — Deploy Gitea a11y fixes to the Forge VPS.
+#
+# Applies custom template overrides for WCAG 2.1 AA compliance fixes
+# identified by the accessibility audit (#492).
+#
+# Fixes:
+#   R1: Password visibility toggle on sign-in (#551)
+#   R2: aria-required on required form fields (#552)
+#   R3: aria-label on star/fork count links (#553)
+#   R4: <time> elements for relative timestamps (#554)
+#
+# Usage:
+#   bash deploy/gitea-a11y/deploy-gitea-a11y.sh [ssh-host]
+#
+# Prerequisites:
+#   - SSH access to the Gitea host
+#   - Gitea installed with custom/ directory writable
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+GITEA_HOST="${1:-root@forge.alexanderwhitestone.com}"
+GITEA_CUSTOM="/var/lib/gitea/custom"
+TEMPLATES_DIR="${SCRIPT_DIR}/custom/templates"
+PUBLIC_DIR="${SCRIPT_DIR}/custom/public"
+
+echo "=== Deploying Gitea a11y fixes to ${GITEA_HOST} ==="
+
+# Upload templates
+echo "  [1/4] Uploading template overrides..."
+rsync -avz --relative "${TEMPLATES_DIR}/" "${GITEA_HOST}:${GITEA_CUSTOM}/templates/"
+
+# Upload public assets (if any)
+if [ -d "${PUBLIC_DIR}" ] && [ "$(ls -A ${PUBLIC_DIR} 2>/dev/null)" ]; then
+    echo "  [2/4] Uploading public assets..."
+    rsync -avz --relative "${PUBLIC_DIR}/" "${GITEA_HOST}:${GITEA_CUSTOM}/public/"
+else
+    echo "  [2/4] No public assets to upload"
+fi
+
+# Set permissions
+echo "  [3/4] Setting permissions..."
+ssh "${GITEA_HOST}" "chown -R gitea:gitea ${GITEA_CUSTOM}/templates/ ${GITEA_CUSTOM}/public/ 2>/dev/null || true"
+
+# Restart Gitea to pick up template changes
+echo "  [4/4] Restarting Gitea..."
+ssh "${GITEA_HOST}" "systemctl restart gitea"
+
+echo ""
+echo "=== Deployed ==="
+echo "  R1: Password toggle on /user/sign_in"
+echo "  R2: aria-required on required fields"
+echo "  R3: aria-label on star/fork counts"
+echo "  R4: <time> elements on timestamps"
+echo ""
+echo "Verify at: https://forge.alexanderwhitestone.com/user/sign_in"