diff --git a/nix/os/containers/webserver.nix b/nix/os/containers/webserver.nix
index e293971..d7632ca 100644
--- a/nix/os/containers/webserver.nix
+++ b/nix/os/containers/webserver.nix
@@ -117,7 +117,11 @@ in {
         };
 
         allowAnonymous = false;
+        allowAnonymousEdits = false;
         allowGravatar = false;
+        allowFreeURL = false;
+        defaultPermission = "private";
+        allowEmailRegister = false;
 
         # oauth2 provider config
         inherit (passwords.www_stefanjunker_de_hedgedoc) dropbox;