From c83d456ecd0f1823a2bc6f30a5b6e2f05ea95eb8 Mon Sep 17 00:00:00 2001 From: rock Date: Tue, 29 Sep 2026 21:13:18 +0800 Subject: [PATCH] fix(forgejo): disable self-registration MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit GET /user/sign_up returned 200 — anyone reaching forgejo.riotpiao.com could create an account. Add [service] DISABLE_REGISTRATION: true. Admin-created accounts (UI/API) are unaffected. --- k8s/bootstrap/phase3-forgejo/forgejo-values.yaml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/k8s/bootstrap/phase3-forgejo/forgejo-values.yaml b/k8s/bootstrap/phase3-forgejo/forgejo-values.yaml index fefb458..e02befc 100644 --- a/k8s/bootstrap/phase3-forgejo/forgejo-values.yaml +++ b/k8s/bootstrap/phase3-forgejo/forgejo-values.yaml @@ -45,7 +45,13 @@ gitea: SSH_DOMAIN: git.riotpiao.com SSH_PORT: 2222 SSH_LISTEN_PORT: 2222 - + + # Self-signup was open (GET /user/sign_up returned 200), so anyone reaching + # forgejo.riotpiao.com could create an account. Accounts are provisioned by + # the admin only; admin create-user via UI/API is unaffected by this flag. + service: + DISABLE_REGISTRATION: true + database: DB_TYPE: postgres HOST: forgejo-db-rw.cicd.svc.cluster.local:5432