From 633549159eb8d255621b6c593dd81a17bc3c2159 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Benjamin=20B=C3=A4dorf?= <hello@benjaminbaedorf.eu>
Date: Sun, 5 Nov 2023 13:46:09 +0100
Subject: [PATCH] fix: keep forgejo email addresses private by default

---
 hosts/nachtigall/apps/forgejo.nix | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/hosts/nachtigall/apps/forgejo.nix b/hosts/nachtigall/apps/forgejo.nix
index e18d2768..f2f1e119 100644
--- a/hosts/nachtigall/apps/forgejo.nix
+++ b/hosts/nachtigall/apps/forgejo.nix
@@ -68,11 +68,16 @@
         ENABLE_OPENID_SIGNIN = true;
         ENABLE_OPENID_SIGNUP = true;
       };
-      # uncomment after initial deployment, first user is admin user
-      # required to setup SSO (oauth openid-connect, keycloak auth provider)
-      service.ALLOW_ONLY_EXTERNAL_REGISTRATION = true;
-      service.ENABLE_NOTIFY_MAIL = true;
-      session.COOKIE_SECURE = lib.mkForce true;
+      service = {
+        # uncomment after initial deployment, first user is admin user
+        # required to setup SSO (oauth openid-connect, keycloak auth provider)
+        ALLOW_ONLY_EXTERNAL_REGISTRATION = true;
+        ENABLE_NOTIFY_MAIL = true;
+        DEFAULT_KEEP_EMAIL_PRIVATE = true;
+      };
+      session = {
+        COOKIE_SECURE = lib.mkForce true;
+      };
     };
   };