From 56e92b98b75ad83ce733971b3aa0030442ff53be Mon Sep 17 00:00:00 2001
From: Claude <claude@localhost.local>
Date: Fri, 6 Nov 2026 19:09:18 -0500
Subject: [PATCH] Mastodon: open registrations so Create account links to
 /members

With registrations closed, the web UI's Create account button opens a
"registrations closed" dialog; when open it links to the configured
sign-up URL (SSO_ACCOUNT_SIGN_UP = www.eom.dev/members). OMNIAUTH_ONLY
still disables local sign-up, so accounts are created only via Dex.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 tasks/main.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/tasks/main.yml b/tasks/main.yml
index 6662720..4c3ed59 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -164,3 +164,29 @@
               - mastodon.eom.dev
               secretName: mastodon-tls
 
+
+# With registrations "open", the web UI's Create account button links to
+# SSO_ACCOUNT_SIGN_UP (www.eom.dev/members) instead of a "closed" dialog.
+# OMNIAUTH_ONLY still disables local sign-up; accounts come only via Dex.
+- name: Find the Mastodon web pod
+  kubernetes.core.k8s_info:
+    kind: Pod
+    namespace: mastodon
+    label_selectors:
+      - app.kubernetes.io/component=web
+      - app.kubernetes.io/instance=mastodon
+    field_selectors:
+      - status.phase=Running
+  register: mastodon_web_pods
+
+- name: Open registrations so sign-up links to the membership site
+  kubernetes.core.k8s_exec:
+    namespace: mastodon
+    pod: "{{ mastodon_web_pods.resources[0].metadata.name }}"
+    container: mastodon
+    # kubectl exec skips the image entrypoint, so load the password files.
+    command: >-
+      sh -c 'export REDIS_PASSWORD="$(cat "$MASTODON_REDIS_PASSWORD_FILE")"
+      DB_PASS="$(cat "$MASTODON_DATABASE_PASSWORD_FILE")" HOME=/tmp;
+      tootctl settings registrations open'
+  changed_when: false