From ba0b1b319d12449585310d137a64098fd9927ce6 Mon Sep 17 00:00:00 2001 From: Phil Date: Sat, 31 Oct 2026 08:48:26 -0600 Subject: [PATCH] Turn off legacy OpenID 2.0 login in Gitea ENABLE_OPENID_SIGNUP let anyone with an OpenID URL register despite DISABLE_REGISTRATION (an account was created that way on 2026-09-30). All logins go through Pocket ID now. Co-Authored-By: Claude Opus 5.5 --- roles/docker/templates/gitea-compose.yml.j2 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/docker/templates/gitea-compose.yml.j2 b/roles/docker/templates/gitea-compose.yml.j2 index b5125fb..b42adfe 100644 --- a/roles/docker/templates/gitea-compose.yml.j2 +++ b/roles/docker/templates/gitea-compose.yml.j2 @@ -13,6 +13,9 @@ services: - GITEA__mailer__SMTP_PORT=465 - GITEA__mailer__USER={{ smtp.username }} - GITEA__mailer__PASSWD={{ vault_smtp.password }} + # Legacy OpenID 2.0 login let anyone register despite DISABLE_REGISTRATION. Logins go through Pocket ID. + - GITEA__openid__ENABLE_OPENID_SIGNIN=false + - GITEA__openid__ENABLE_OPENID_SIGNUP=false restart: unless-stopped labels: mag37.dockcheck.update: true