Feature Request: Allow manual sending of email confirmations #7688

New Issue

GiteaMirror · 2025-11-02T07:33:39-06:00

GiteaMirror commented

2025-11-02 07:33:39 -06:00

Originally created by @techknowlogick on GitHub (Aug 12, 2021).

This is a feature request to allow toggling of automatic email confirmation emails.

The reason behind this request is that while ratelimiting on signups would be helpful, gitea.com (and other public gitea instances) can receive many signup requests (even for invalid emails) across many IPs. There are very clear patterns for the spam attacks, and so perhaps for larger instances it'd be helpful if instead of auto-sending emails we have an admin mail things out (via button in admin dashboard,etc..). This would also allow admins to re-send verification emails if something states they didn't receive the original email.

Originally created by @techknowlogick on GitHub (Aug 12, 2021). This is a feature request to allow toggling of automatic email confirmation emails. The reason behind this request is that while ratelimiting on signups would be helpful, gitea.com (and other public gitea instances) can receive many signup requests (even for invalid emails) across many IPs. There are very clear patterns for the spam attacks, and so perhaps for larger instances it'd be helpful if instead of auto-sending emails we have an admin mail things out (via button in admin dashboard,etc..). This would also allow admins to re-send verification emails if something states they didn't receive the original email.

GiteaMirror added the type/proposal label 2025-11-02 07:33:40 -06:00

GiteaMirror commented

2025-11-02 07:33:40 -06:00

@wULLSnpAXbWZGYDYyhWTKKspEQoaYxXyhoisqHf commented on GitHub (Aug 12, 2021):

this is a great idea, I second this.
enough (as few as one!) people register with bogus addresses of some Big Name, Gitea sends out "registration confirmation" emails, for which they never asked for, they report the emails as spam and then you have to pretty please the likes of Spamhaus (personal experience... [1]) for de-listing of your {domain,IP}s.
I have since made use of both the email allowlist Gitea offers and disabled "registration confirmation" emails just to make sure (for now), but this would be much more granular.

refs:
[1] https://git.dotya.ml/dotya.ml/hostmaster/issues/1

@wULLSnpAXbWZGYDYyhWTKKspEQoaYxXyhoisqHf commented on GitHub (Aug 12, 2021): this is a great idea, I second this. enough (as few as one!) people register with bogus addresses of some Big Name, Gitea sends out "registration confirmation" emails, for which they never asked for, they report the emails as spam and then you have to pretty please the likes of Spamhaus (personal experience... [1]) for de-listing of your {domain,IP}s. I have since made use of both the email allowlist Gitea offers and disabled "registration confirmation" emails just to make sure (for now), but this would be much more granular. refs: [1] https://git.dotya.ml/dotya.ml/hostmaster/issues/1

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#7688