pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

fix: keep forgejo email addresses private by default

Browse source
This commit is contained in:
Benjamin Bädorf 2023-11-05 13:46:09 +01:00
parent 90b0fb53e6
commit 633549159e
No known key found for this signature in database
GPG key ID: 4406E80E13CD656C
1 changed files with 10 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
hosts/nachtigall/apps/forgejo.nix
View file

@ -68,11 +68,16 @@
ENABLE_OPENID_SIGNIN = true; ENABLE_OPENID_SIGNIN = true;
ENABLE_OPENID_SIGNUP = true; ENABLE_OPENID_SIGNUP = true;
}; };
service = {
# uncomment after initial deployment, first user is admin user # uncomment after initial deployment, first user is admin user
# required to setup SSO (oauth openid-connect, keycloak auth provider) # required to setup SSO (oauth openid-connect, keycloak auth provider)
service.ALLOW_ONLY_EXTERNAL_REGISTRATION = true; ALLOW_ONLY_EXTERNAL_REGISTRATION = true;
service.ENABLE_NOTIFY_MAIL = true; ENABLE_NOTIFY_MAIL = true;
session.COOKIE_SECURE = lib.mkForce true; DEFAULT_KEEP_EMAIL_PRIVATE = true;
};
session = {
COOKIE_SECURE = lib.mkForce true;
};
}; };
}; };