phil/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Turn off legacy OpenID 2.0 login in Gitea

Browse Source 
ENABLE_OPENID_SIGNUP let anyone with an OpenID URL register despite
DISABLE_REGISTRATION (an account was created that way on 2026-09-30).
All logins go through Pocket ID now.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Phil
2026-10-31 08:48:26 -06:00
co-authored by Claude Opus 5.5
parent 0371004150
commit ba0b1b319d
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/docker/templates/gitea-compose.yml.j2
+3
View File
@@ -13,6 +13,9 @@ services:
- GITEA__mailer__SMTP_PORT=465 - GITEA__mailer__SMTP_PORT=465
- GITEA__mailer__USER={{ smtp.username }} - GITEA__mailer__USER={{ smtp.username }}
- GITEA__mailer__PASSWD={{ vault_smtp.password }} - GITEA__mailer__PASSWD={{ vault_smtp.password }}
# Legacy OpenID 2.0 login let anyone register despite DISABLE_REGISTRATION. Logins go through Pocket ID.
- GITEA__openid__ENABLE_OPENID_SIGNIN=false
- GITEA__openid__ENABLE_OPENID_SIGNUP=false
restart: unless-stopped restart: unless-stopped
labels: labels:
mag37.dockcheck.update: true mag37.dockcheck.update: true