diff --git a/git.nix b/git.nix
index a877b7a..67767cc 100644
--- a/git.nix
+++ b/git.nix
@@ -16,5 +16,7 @@ in
   services.gitea = {
     enable = true;
     httpAddress = "127.0.0.1";
+    disableRegistration = true;
+    cookieSecure = true;
   };
 }