diff --git a/config/gitea/app.toml b/config/gitea/app.toml
index babd6bc..e7f8ced 100755
--- a/config/gitea/app.toml
+++ b/config/gitea/app.toml
@@ -24,6 +24,7 @@ DEFAULT_KEEP_EMAIL_PRIVATE        = true
 DEFAULT_ALLOW_CREATE_ORGANIZATION = true
 DEFAULT_ENABLE_TIMETRACKING       = true
 NO_REPLY_ADDRESS                  = "noreply.oat.zone"
+DISABLE_REGISTRATION              = true
 
 [picture]
 DISABLE_GRAVATAR        = false
@@ -34,7 +35,8 @@ ENABLE_OPENID_SIGNIN = false
 ENABLE_OPENID_SIGNUP = false
 
 [session]
-PROVIDER = "file"
+PROVIDER      = "file"
+COOKIE_SECURE = true
 
 [other]
 SHOW_FOOTER_BRANDING = true
diff --git a/modules/services/gitea.nix b/modules/services/gitea.nix
index 8f78864..c287c99 100644
--- a/modules/services/gitea.nix
+++ b/modules/services/gitea.nix
@@ -24,12 +24,10 @@ in {
       gitea = {
         enable = true;
         package = pkgs.unstable.gitea;
-        disableRegistration = true;
         domain = cfg.domain;
         httpPort = cfg.port;
         rootUrl = "https://${cfg.domain}/";
         stateDir = "/var/lib/${cfg.domain}";
-        cookieSecure = true;
         appName = "Gitea: dark-firepit hosted Git";
         database = {
           type = "postgres";