diff --git a/configuration.nix b/configuration.nix
index ed7d247..8527b37 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -246,10 +246,21 @@
     cookieSecure        = true;
     disableRegistration = false;
     settings = {
+      # increase cookie expiration time
       security.LOGIN_REMEMBER_DAYS = 365;
-      attachment.MAX_SIZE = 10;  # file upload size (MB)
+
+      # file upload size (MB)
+      attachment.MAX_SIZE = 10;
+
+      # new users can only create PR/issues
       service.DEFAULT_ALLOW_CREATE_ORGANIZATION = false;
+      repository.MAX_CREATION_LIMIT = 0;
+
+      # somewhat limit spam
       service.EMAIL_DOMAIN_BLOCKLIST = "gmail.com";
+
+      # allow the notify webhook to use matrix
+      webhook.ALLOWED_HOST_LIST = "maxwell.ydns.eu";
     };
   };