From 12f333d5e88e9c6285b1e42c75c01dc240d73a33 Mon Sep 17 00:00:00 2001
From: Nik Afiq <nik.afiq98@ymail.com>
Date: Wed, 11 Mar 2026 23:25:42 +0900
Subject: [PATCH] Update Gitea and Grafana configurations to enhance
 registration and authentication settings

---
 values/gitea.yaml                 | 3 +++
 values/kube-prometheus-stack.yaml | 4 ++++
 2 files changed, 7 insertions(+)

diff --git a/values/gitea.yaml b/values/gitea.yaml
index b3c4727..161f94a 100644
--- a/values/gitea.yaml
+++ b/values/gitea.yaml
@@ -42,6 +42,9 @@ gitea:
       DEFAULT_PRIVATE: true
     service:
       DISABLE_REGISTRATION: true
+      ALLOW_ONLY_EXTERNAL_SELF_REGISTRATION: false
+    auth:
+      LOCAL_REGISTRATION_DISABLED: true
 
 persistence:
   enabled: true
diff --git a/values/kube-prometheus-stack.yaml b/values/kube-prometheus-stack.yaml
index 236178a..7816ea8 100644
--- a/values/kube-prometheus-stack.yaml
+++ b/values/kube-prometheus-stack.yaml
@@ -24,6 +24,10 @@ grafana:
       token_url: https://auth.nik4nao.com/application/o/token/
       api_url: https://auth.nik4nao.com/application/o/userinfo/
       role_attribute_path: contains(groups, 'authentik Admins') && 'Admin' || 'Viewer'
+    auth:
+      disable_login_form: true
+    auth.basic:
+      enabled: false
   ingress:
     enabled: true
     ingressClassName: traefik