From c2e45eb82b35ce88d861e8c2dd34d671c5b42dfa Mon Sep 17 00:00:00 2001
From: Robert Metcalf <rmetcalf9@googlemail.com>
Date: Thu, 22 Feb 2018 16:10:32 +0000
Subject: [PATCH] #170 Defaulting signup enabled to false for new databases

---
 api/models/Settings.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/api/models/Settings.js b/api/models/Settings.js
index 786bcdf3d..7bdc155f3 100644
--- a/api/models/Settings.js
+++ b/api/models/Settings.js
@@ -25,7 +25,10 @@ var defaultModel = _.merge(_.cloneDeep(require('../base/Model')), {
     seedData: [
         {
             "data": {
-                signup_enable: true,
+                // Default signup enabled to false on new databases
+                //  if admins want signup enabled they can switch it on
+                //  via settings. This seems to be more secure.
+                signup_enable: false,
                 signup_require_activation: false,
                 info_polling_interval: 5000,
                 email_default_sender_name: 'KONGA',