If i remember correctly on my gitea (now forgejo) the default is open registration which really shouldn't be the case for projects that are targeted towards self hosters.
My inital install was a long time ago so I don't remember for sure
Jellyfin for Android TV update to 0.19
Custom Attributes in Authentik OIDC
Infinite scroll in GrayJay app?
Help with ZFS Array
Am I the only one who missed the Owncloud rewrite in Go?
A Story of Silent Data Corruption with Seafile
Self hosted YouTube player with automatic yt-dlp downloader
Anyone tried this 4x 10gbe + 5x 2.5gbe router?
zwave to Ethernet bridge
Do UltraPro Z-WAve Switches have local control?
I used this guide to use traefik with a wildcard certificate from let's encrypt that is internal only. So I have
Immich.domain.com
And also
Vault.local.domain.com
This allows something like vaultwarden to only be accessible on my internal LAN while something like immich is exposed so I can share albums with anyone I want.
If I want to connect to vaultwarden while away from home, I connect to wireguard first then access via the local URL.
In docker I don't even close the app's ports, so even locally everything has SSL everywhere.
https://youtu.be/liV3c9m_OX8