Revert "Disable registrations by default due to spam."

Turns out this breaks tests. Will attempt again when I have time to deal with
the tests.

This reverts commit 120f144f0eb014e694a584a627c8b17856da5b51.
This commit is contained in:
Ben Sturmfels 2021-09-12 22:51:15 +10:00
parent 78b36373b4
commit 54c610b5fe
No known key found for this signature in database
GPG Key ID: 023C05E2C9C068F0
5 changed files with 15 additions and 22 deletions

View File

@ -317,9 +317,6 @@ your own email address and enter a secure password when prompted::
$ ./bin/gmg adduser --username you --email you@example.com $ ./bin/gmg adduser --username you --email you@example.com
$ ./bin/gmg makeadmin you $ ./bin/gmg makeadmin you
Public registrations is disabled by default due to automated spam
registrations. For more details, see ":ref:`enable-registration`"
Test the Server Test the Server
~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~

View File

@ -18,30 +18,28 @@ Further Considerations for Production Deployments
This page extends upon our ":doc:`deploying`" guide to describe some common This page extends upon our ":doc:`deploying`" guide to describe some common
issues affecting production deployments. issues affecting production deployments.
.. _enable-registration:
Should I Keep Open Registration Enabled? Should I Keep Open Registration Enabled?
---------------------------------------- ----------------------------------------
Unfortunately, enabling public registrations in MediaGoblin will usually result Unfortunately, in this current release of MediaGoblin we are suffering
in many thousands of automated spam registrations. Spam accounts will typically from spammers registering to public instances en masse. As such, you
remain un-activated, but the volume alone may cause poor performance on your may want to either:
site. For this reason, registrations are disabled by default and we recommend
against enabling public registration.
Should you choose to enable registration, you can update in your mediagoblin.ini a) Disable registration on your instance and just make
like so:: accounts for people you know and trust (eg via the `gmg adduser`
command). You can disable registration in your mediagoblin.ini
like so::
[mediagoblin] [mediagoblin]
allow_registration = false allow_registration = false
Alternatively, you may wish to just make accounts for people you know and trust b) Enable a CAPTCHA plugin. But unfortunately, though some CAPTCHA
(eg via the `gmg adduser` command). plugins exist, for various reasons we do not have any general
recommendations we can make at this point.
A further option may be to enable a CAPTCHA plugin. But unfortunately, though We hope to have a better solution to this situation shortly. We
some CAPTCHA plugins exist, for various reasons we do not have any general apologize for the inconvenience in the meanwhile.
recommendations we can make at this point. We hope to provide a better solution
to this problem in the future.
Confidential Files Confidential Files

View File

@ -44,7 +44,6 @@ This chapter has important information about our current and previous releases.
- Remove Debian 10 development Dockerfile (BenSturmfels) - Remove Debian 10 development Dockerfile (BenSturmfels)
- Document running multiple MediaGoblin instances on one server (Ben Sturmfels) - Document running multiple MediaGoblin instances on one server (Ben Sturmfels)
- Begin conversion from jQuery to vanilla JS (Ben Sturmfels) - Begin conversion from jQuery to vanilla JS (Ben Sturmfels)
- Disable registration by default due to spam (Ben Sturmfels)
**Bug fixes:** **Bug fixes:**

View File

@ -27,9 +27,8 @@ email_debug_mode = true
# email_smtp_host = "" # email_smtp_host = ""
# email_smtp_port = 0 # email_smtp_port = 0
# Set to true to enable registrations. We recommend reading "Should I Keep Open # Set to false to disable registrations
# Registration Enabled?" in the production deployment documentation first. allow_registration = true
allow_registration = false
# Set to false to disable the ability for users to report offensive content # Set to false to disable the ability for users to report offensive content
allow_reporting = true allow_reporting = true

View File

@ -50,7 +50,7 @@ email_smtp_pass = string(default=None)
# Set to false to disable registrations # Set to false to disable registrations
allow_registration = boolean(default=False) allow_registration = boolean(default=True)
# tag parsing # tag parsing
tags_max_length = integer(default=255) tags_max_length = integer(default=255)