diff --git a/mealie/CHANGELOG.md b/mealie/CHANGELOG.md index bdcd2e528e..7287952eca 100644 --- a/mealie/CHANGELOG.md +++ b/mealie/CHANGELOG.md @@ -1,4 +1,7 @@ +## v3.29.0.2 (2026-11-04) +- `ALLOW_SIGNUP` now defaults to `false` on new installs, matching upstream Mealie, so LAN devices cannot self-register on a fresh install. Existing installs keep their current setting (#3191) + ## v3.29.0.1 (2026-10-25) - New option `login_with_ha_user` (on by default): the Ingress panel logs in as the Mealie user matching your Home Assistant username, through Mealie's reverse proxy auth. Unmatched users get the normal login page - Only the ingress server can use it: it sends Mealie a per-boot shared secret (`REVERSE_PROXY_AUTH_SECRET`), and the ingress listener now accepts only the Supervisor diff --git a/mealie/README.md b/mealie/README.md index 14f3513bc4..63e628f671 100644 --- a/mealie/README.md +++ b/mealie/README.md @@ -56,7 +56,7 @@ Configurations can be done through the app webUI, except for the following optio | `keyfile` | str | `privkey.pem` | SSL key file (must be in /ssl) | | `BASE_URL` | str | | Optional external base URL | | `DATA_DIR` | str | `/config` | Data directory path | -| `ALLOW_SIGNUP` | bool | `true` | Allow new user signup | +| `ALLOW_SIGNUP` | bool | `false` | Allow new user signup | | `login_with_ha_user` | bool | `true` | Log in through Ingress as your Home Assistant username | To configure Gunicorn's `--forwarded-allow-ips` setting for trusted reverse proxies, manually add a `FORWARDED_ALLOW_IPS` entry to your add-on configuration (comma-separated IPs). It is optional and hidden from the default options tab. For example: `FORWARDED_ALLOW_IPS: "192.168.1.1,10.0.0.1"` diff --git a/mealie/config.yaml b/mealie/config.yaml index cc1d2d4d31..fc9108c865 100644 --- a/mealie/config.yaml +++ b/mealie/config.yaml @@ -86,7 +86,7 @@ name: Mealie options: env_vars: [] login_with_ha_user: true - ALLOW_SIGNUP: true + ALLOW_SIGNUP: false DATA_DIR: /config PGID: 1000 PUID: 1000 @@ -116,4 +116,4 @@ schema: slug: mealie udev: true url: https://github.com/alexbelgium/hassio-addons -version: "v3.29.0.1" +version: "v3.29.0.2"