From 54e766b728808a41b2a777824f21d69aebdf86ef Mon Sep 17 00:00:00 2001
From: Hari <73809867+harivansh-afk@users.noreply.github.com>
Date: Wed, 1 Apr 2026 16:38:15 -0400
Subject: [PATCH] require sign-in for all forgejo access (#26)

Adds REQUIRE_SIGNIN_VIEW to prevent unauthenticated cloning and browsing.
---
 hosts/netty/configuration.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/hosts/netty/configuration.nix b/hosts/netty/configuration.nix
index 1fc21b4..399d19e 100644
--- a/hosts/netty/configuration.nix
+++ b/hosts/netty/configuration.nix
@@ -270,7 +270,10 @@ in
         HTTP_PORT = 19300;
         SSH_DOMAIN = forgejoDomain;
       };
-      service.DISABLE_REGISTRATION = true;
+      service = {
+        DISABLE_REGISTRATION = true;
+        REQUIRE_SIGNIN_VIEW = true;
+      };
       session.COOKIE_SECURE = true;
       mirror = {
         DEFAULT_INTERVAL = "1h";