diff --git a/ansible/pre-deploy.yml b/ansible/pre-deploy.yml
index 926ec13..8acd9a3 100644
--- a/ansible/pre-deploy.yml
+++ b/ansible/pre-deploy.yml
@@ -95,6 +95,7 @@
           DB_TYPE: "mysql"
           DB_USER: "mariadb" # https://github.com/dokku/dokku-mariadb/issues/89
           DESCRIPTION: "{{ description }}"
+          DISABLE_REGISTRATION: "{{ disable_registration }}"
           DOKKU_LETSENCRYPT_EMAIL: "{{ autonomic_admin_mail }}"
           DOMAIN: "{{ domain }}"
           ENABLE_OPENID_SIGNIN: "{{ enable_openid_signin }}"
diff --git a/ansible/vars/all.yml b/ansible/vars/all.yml
index 7da4b32..d62ea78 100644
--- a/ansible/vars/all.yml
+++ b/ansible/vars/all.yml
@@ -5,6 +5,7 @@ autonomic_admin_mail: "helo@autonomic.zone"
 autonomic_admin_user: "autonomic"
 autonomic_app_name: "Gitea: Git with solidaritea"
 description: "Git hosting for conrads"
+disable_registration: "true"
 domain: "git.autonomic.zone"
 enable_openid_signin: "true"
 enable_openid_signup: "true"
diff --git a/sbin/entrypoint.sh b/sbin/entrypoint.sh
index 240b2ff..f7adba2 100755
--- a/sbin/entrypoint.sh
+++ b/sbin/entrypoint.sh
@@ -65,6 +65,7 @@ setup_app_ini() {
     crudini --set "$app_ini" server HTTP_PORT "3000"
 
     crudini --set "$app_ini" service DISABLE_REGISTRATION "${DISABLE_REGISTRATION}"
+    crudini --set "$app_ini" service ALLOW_ONLY_EXTERNAL_REGISTRATION "${ALLOW_ONLY_EXTERNAL_REGISTRATION}"
 
     crudini --set "$app_ini" security INSTALL_LOCK "${INSTALL_LOCK}"
     crudini --set "$app_ini" security SECRET_KEY "${SECRET_KEY}"