From: Christopher Allan Webber <cwebber@dustycloud.org>
Date: Sat, 30 May 2015 15:27:37 +0000 (-0500)
Subject: "Should I enable registration?" section
X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=3f088a3f3d8a7cfd656dbd06650baed74250ee2e;p=mediagoblin.git

"Should I enable registration?" section
---

diff --git a/docs/source/siteadmin/deploying.rst b/docs/source/siteadmin/deploying.rst
index 673efb30..e75e6744 100644
--- a/docs/source/siteadmin/deploying.rst
+++ b/docs/source/siteadmin/deploying.rst
@@ -501,6 +501,29 @@ Instructions and scripts for running MediaGoblin on an Apache server
 can be found on the `MediaGoblin wiki <http://wiki.mediagoblin.org/Deployment>`_.
 
 
+Should I Enable Registration?
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Unfortunately, in this current release of MediaGoblin we are suffering
+from spammers registering to public instances en masse.  As such, you
+may want to either:
+
+a) Disable registration on your instance and just make
+   accounts for people you know and trust (eg via the `gmg adduser`
+   command).  You can disable registration in your mediagoblin.ini
+   like so::
+
+     [mediagoblin]
+     allow_registration = false
+
+b) Enable a captcha plugin.  But unfortunately, though some captcha
+   plugins exist, for various reasons we do not have any general
+   recommendations we can make at this point.
+
+We hope to have a better solution to this situation shortly.  We
+apologize for the inconvenience in the meanwhile.
+
+
 Security Considerations
 ~~~~~~~~~~~~~~~~~~~~~~~