Spam accounts #2

Closed
opened 2026-03-31 15:19:26 +00:00 by eric · 3 comments
Owner

Related to DevOps/software-infrastructure#27, this issue tracks the Gitea changes required to remove spam accounts from this server.

  • Require captchas for account creation
  • Require email verification for new accounts
  • Implement email blacklist
  • Purge existing verified spam accounts and repos
  • Implement a cron job to remove unverified accounts periodically
  • Preserve client IP addresses in logs
Related to DevOps/software-infrastructure#27, this issue tracks the Gitea changes required to remove spam accounts from this server. - [x] Require captchas for account creation - [x] Require email verification for new accounts - [x] Implement email blacklist - [x] Purge existing verified spam accounts and repos - [ ] Implement a cron job to remove unverified accounts periodically - [ ] [Preserve client IP addresses in logs](https://gitea.com/gitea/helm-gitea/issues/1056)
Author
Owner

Existing accounts deleted with:

for i in $(seq 24 123634) # first to last account id
do
gitea admin user delete --id $i --purge
done
Existing accounts deleted with: ``` for i in $(seq 24 123634) # first to last account id do gitea admin user delete --id $i --purge done ```
Author
Owner

Used dashboard to delete inactivated accounts. This will need to be done periodically while the attack continues.

Used dashboard to delete inactivated accounts. This will need to be done periodically while the attack continues.
eric closed this issue 2026-05-20 15:40:50 +00:00
Author
Owner

Help was received from this Reddit thread.

Help was received from [this Reddit thread](https://www.reddit.com/r/homelab/comments/1tij3gj/need_help_blocking_malicious_ips_from_network/).
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DevOps/ansible-role-gitea#2