diff --git a/hosts/trantor/forgejo.nix b/hosts/trantor/forgejo.nix
index c11573e..a89526d 100644
--- a/hosts/trantor/forgejo.nix
+++ b/hosts/trantor/forgejo.nix
@@ -24,6 +24,7 @@ in
       log.LEVEL = "Warn";
       mailer.ENABLED = false;
       actions.ENABLED = false;
+      service.DISABLE_REGISTRATION = true;
     };
   };
 
diff --git a/secrets/forgejo-root-password.age b/secrets/forgejo-root-password.age
new file mode 100644
index 0000000..90be612
Binary files /dev/null and b/secrets/forgejo-root-password.age differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 84b14d6..a90cd74 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -27,4 +27,9 @@ in
     rotterdam-user
     alexandria
   ];
+  "forgejo-root-password.age".publicKeys = [
+    io-user
+    rotterdam-user
+    trantor
+  ];
 }