diff --git a/package-lock.json b/package-lock.json
index 143aa2e0..6d2b9211 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11,6 +11,7 @@
                 "@dnd-kit/core": "^6.3.1",
                 "@dnd-kit/sortable": "^10.0.0",
                 "@dnd-kit/utilities": "^3.2.2",
+                "@fontsource/instrument-sans": "^5.3.0",
                 "@headlessui/react": "^2.2.0",
                 "@inertiajs/react": "^2.0.0",
                 "@radix-ui/react-avatar": "^1.1.3",
@@ -1160,6 +1161,15 @@
             "integrity": "sha512-MDWhGtE+eHw5JW7lq4qhc5yRLS11ERl1c7Z6Xd0a58DozHES6EnNNwUWbMiG4J9Cgj053Bhk8zvlhFYKVhULwg==",
             "license": "MIT"
         },
+        "node_modules/@fontsource/instrument-sans": {
+            "version": "5.3.0",
+            "resolved": "https://registry.npmjs.org/@fontsource/instrument-sans/-/instrument-sans-5.3.0.tgz",
+            "integrity": "sha512-QwXc4hb/px3XvSPS2CPAOgey8nyrQFxgxrmXQQ+pN+P51hKdAcchxpg8rSbjANFfPu6VKXhDqkVDucXMZ9CM5g==",
+            "license": "OFL-1.1",
+            "funding": {
+                "url": "https://github.com/sponsors/ayuhito"
+            }
+        },
         "node_modules/@headlessui/react": {
             "version": "2.2.0",
             "resolved": "https://registry.npmjs.org/@headlessui/react/-/react-2.2.0.tgz",
diff --git a/package.json b/package.json
index e70008ae..bcc5171b 100644
--- a/package.json
+++ b/package.json
@@ -30,6 +30,7 @@
         "@dnd-kit/core": "^6.3.1",
         "@dnd-kit/sortable": "^10.0.0",
         "@dnd-kit/utilities": "^3.2.2",
+        "@fontsource/instrument-sans": "^5.3.0",
         "@headlessui/react": "^2.2.0",
         "@inertiajs/react": "^2.0.0",
         "@radix-ui/react-avatar": "^1.1.3",
diff --git a/resources/css/app.css b/resources/css/app.css
index 006a8bbd..935bacc7 100644
--- a/resources/css/app.css
+++ b/resources/css/app.css
@@ -1,5 +1,21 @@
 @import 'tailwindcss';
 
+/*
+ * Instrument Sans, served by this installation rather than by a font CDN.
+ *
+ * The three weights the design uses, which is what the stylesheet this
+ * replaces asked for. Every visitor to /login, /register, /forgot-password
+ * and every public share link used to make a request to a third party
+ * before they had done anything, handing it their IP, their user agent and
+ * the hostname of the installation they were visiting — on the signed-out
+ * pages, where the visitor has not agreed to anything and the operator
+ * never chose the recipient. Bundling it makes those pages talk only to
+ * the server they were asked for.
+ */
+@import '@fontsource/instrument-sans/400.css';
+@import '@fontsource/instrument-sans/500.css';
+@import '@fontsource/instrument-sans/600.css';
+
 @plugin 'tailwindcss-animate';
 
 @source '../../vendor/laravel/framework/src/Illuminate/Pagination/resources/views/*.blade.php';
diff --git a/resources/views/app.blade.php b/resources/views/app.blade.php
index a54dcc9b..5a3fd2e6 100644
--- a/resources/views/app.blade.php
+++ b/resources/views/app.blade.php
@@ -33,9 +33,6 @@
         <link rel="icon" href="/favicon.svg" type="image/svg+xml">
         <link rel="apple-touch-icon" href="/apple-touch-icon.png">
 
-        <link rel="preconnect" href="https://fonts.bunny.net">
-        <link href="https://fonts.bunny.net/css?family=instrument-sans:400,500,600" rel="stylesheet" />
-
         @routes
         @viteReactRefresh
         @php