diff --git a/ansible/group_vars/vps.yml b/ansible/group_vars/vps.yml
index 4b9ff00..4a3952e 100644
--- a/ansible/group_vars/vps.yml
+++ b/ansible/group_vars/vps.yml
@@ -36,3 +36,4 @@ openrouter_api_key: ""
 # --- Traefik / TLS ---
 traefik_acme_email: "you@example.com"
 ingress_host: "bot.yourdomain.com"
+aider_model: "openrouter/anthropic/claude-sonnet-4"
diff --git a/ansible/playbook.yml b/ansible/playbook.yml
index 63451e7..3b5e581 100644
--- a/ansible/playbook.yml
+++ b/ansible/playbook.yml
@@ -197,6 +197,7 @@
           stringData:
             JOB_TTL_SECONDS: "3600"
             ADMIN_TOKEN: "{{ admin_token }}"
+            AIDER_MODEL: "{{ aider_model }}"
       register: apply_secret_orchestrator_cfg
       changed_when: "'created' in apply_secret_orchestrator_cfg.stdout or 'configured' in apply_secret_orchestrator_cfg.stdout"
       # no_log: true
diff --git a/ansible/secrets.env.example b/ansible/secrets.env.example
new file mode 100644
index 0000000..f76a9b9
--- /dev/null
+++ b/ansible/secrets.env.example
@@ -0,0 +1,11 @@
+ingress_host=bot.yourdomain.com
+aider_model=openrouter/anthropic/claude-sonnet-4
+traefik_acme_email=you@example.com
+github_app_id=123456
+github_private_key_local_path=/path/to/github-app.pem
+webhook_secret=changeme
+admin_token=changeme
+anthropic_api_key=
+openai_api_key=
+openrouter_api_key=
+aider_model=openrouter/x-ai/grok-4.3
diff --git a/app/config.py b/app/config.py
index e5d9e7d..99790e4 100644
--- a/app/config.py
+++ b/app/config.py
@@ -20,6 +20,7 @@ class Settings:
     claude_worker_image: str = os.getenv("CLAUDE_WORKER_IMAGE", "worker-claude:latest")
     codex_worker_image: str = os.getenv("CODEX_WORKER_IMAGE", "worker-codex:latest")
     aider_worker_image: str = os.getenv("AIDER_WORKER_IMAGE", "worker-aider:latest")
+    aider_model: str = os.getenv("AIDER_MODEL", "openrouter/anthropic/claude-sonnet-4")
 
     github_app_id: str = os.getenv("GITHUB_APP_ID", "")
     github_private_key: str = os.getenv("GITHUB_PRIVATE_KEY", "")
@@ -59,5 +60,6 @@ class ProviderConfig:
         image=settings.aider_worker_image,
         ai_provider="aider",
         api_secret=ProviderSecretRef("OPENROUTER_API_KEY", "openrouter-api-key", "OPENROUTER_API_KEY"),
+        extra_env=(("AIDER_MODEL", settings.aider_model),),
     ),
 }
diff --git a/k8s/orchestrator.yaml b/k8s/orchestrator.yaml
index 02adca4..a7b37f8 100644
--- a/k8s/orchestrator.yaml
+++ b/k8s/orchestrator.yaml
@@ -35,6 +35,11 @@ spec:
                 secretKeyRef:
                   name: orchestrator-config
                   key: ADMIN_TOKEN
+            - name: AIDER_MODEL
+              valueFrom:
+                secretKeyRef:
+                  name: orchestrator-config
+                  key: AIDER_MODEL
             - name: WEBHOOK_SECRET
               valueFrom:
                 secretKeyRef: