From 72b7f1467b18bd1bb376134ad13fa54e2f041c7b Mon Sep 17 00:00:00 2001
From: Conrad Kramer <conrad@conradkramer.com>
Date: Thu, 2 Apr 2026 21:44:10 -0700
Subject: [PATCH] Disable Forgejo local password sign-in

---
 nixos/hosts/burrow-forge/default.nix | 1 +
 nixos/modules/burrow-forge.nix       | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/nixos/hosts/burrow-forge/default.nix b/nixos/hosts/burrow-forge/default.nix
index 76b0ef5..d612ea8 100644
--- a/nixos/hosts/burrow-forge/default.nix
+++ b/nixos/hosts/burrow-forge/default.nix
@@ -91,6 +91,7 @@
     headscaleClientSecretFile = config.age.secrets.burrowHeadscaleOidcClientSecret.path;
     googleClientIDFile = config.age.secrets.burrowAuthentikGoogleClientId.path;
     googleClientSecretFile = config.age.secrets.burrowAuthentikGoogleClientSecret.path;
+    googleLoginMode = "redirect";
     bootstrapUsers = [
       {
         username = "contact";
diff --git a/nixos/modules/burrow-forge.nix b/nixos/modules/burrow-forge.nix
index d238f2e..51af7eb 100644
--- a/nixos/modules/burrow-forge.nix
+++ b/nixos/modules/burrow-forge.nix
@@ -203,6 +203,9 @@ in
 
         service = {
           DISABLE_REGISTRATION = true;
+          ENABLE_INTERNAL_SIGNIN = false;
+          ENABLE_BASIC_AUTHENTICATION = false;
+          SHOW_REGISTRATION_BUTTON = false;
           REQUIRE_SIGNIN_VIEW = false;
           DEFAULT_ALLOW_CREATE_ORGANIZATION = false;
           ENABLE_NOTIFY_MAIL = false;