From 633549159eb8d255621b6c593dd81a17bc3c2159 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Benjamin=20B=C3=A4dorf?= Date: Sun, 5 Nov 2023 13:46:09 +0100 Subject: [PATCH] fix: keep forgejo email addresses private by default --- hosts/nachtigall/apps/forgejo.nix | 15 ++++++++++----- 1 file changed, 10 insertions(+), 5 deletions(-) diff --git a/hosts/nachtigall/apps/forgejo.nix b/hosts/nachtigall/apps/forgejo.nix index e18d276..f2f1e11 100644 --- a/hosts/nachtigall/apps/forgejo.nix +++ b/hosts/nachtigall/apps/forgejo.nix @@ -68,11 +68,16 @@ ENABLE_OPENID_SIGNIN = true; ENABLE_OPENID_SIGNUP = true; }; - # uncomment after initial deployment, first user is admin user - # required to setup SSO (oauth openid-connect, keycloak auth provider) - service.ALLOW_ONLY_EXTERNAL_REGISTRATION = true; - service.ENABLE_NOTIFY_MAIL = true; - session.COOKIE_SECURE = lib.mkForce true; + service = { + # uncomment after initial deployment, first user is admin user + # required to setup SSO (oauth openid-connect, keycloak auth provider) + ALLOW_ONLY_EXTERNAL_REGISTRATION = true; + ENABLE_NOTIFY_MAIL = true; + DEFAULT_KEEP_EMAIL_PRIVATE = true; + }; + session = { + COOKIE_SECURE = lib.mkForce true; + }; }; }; -- 2.44.2