• oauth, and control sign ups via there. Don’t let people sign up via forgejo itself.
  • anubis, yeah. Or similar.
  • forgejo actions is an optional component… and forgejo users can bring their own actions server. Of course, it’s a risk to them since the server owner could execute code in actions. But yeah.