diff --git a/host_vars/forgejo.mgrote.net.yml b/host_vars/forgejo.mgrote.net.yml
index 1cf1c402..c130c983 100644
--- a/host_vars/forgejo.mgrote.net.yml
+++ b/host_vars/forgejo.mgrote.net.yml
@@ -90,12 +90,12 @@ gitea_password_check_pwn: false
 gitea_internal_token: "{{ lookup('keepass', 'gitea_internal_token', 'password') }}"
 gitea_secret_key: "{{ lookup('keepass', 'gitea_secret_key', 'password') }}"
 # service
-gitea_disable_registration: false # true
+gitea_disable_registration: true
 gitea_register_email_confirm: true
 gitea_require_signin: false
 gitea_default_keep_mail_private: true
 gitea_enable_captcha: false
-gitea_show_registration_button: true # false
+gitea_show_registration_button: false
 gitea_enable_notify_mail: true
 gitea_default_user_visibility: "limited"
 gitea_default_org_visibility: "limited"
diff --git a/host_vars/ldap.mgrote.net.yml b/host_vars/ldap.mgrote.net.yml
index 8510156d..48291d61 100644
--- a/host_vars/ldap.mgrote.net.yml
+++ b/host_vars/ldap.mgrote.net.yml
@@ -31,7 +31,7 @@ ufw_rules:
 
 ### mgrote_lldap
 lldap_package_url: "https://download.opensuse.org/repositories/home:/Masgalor:/LLDAP/xUbuntu_22.04/amd64/lldap_0.5.0-1+3.1_amd64.deb"
-lldap_logging_verbose: "false"
+lldap_logging_verbose: "true" # must be a string not a boolean
 lldap_http_port: 17170
 lldap_http_host: "0.0.0.0"
 lldap_ldap_host: "0.0.0.0"
@@ -49,7 +49,7 @@ lldap_smtp_server: "docker10.mgrote.net"
 lldap_smtp_port: "1025"
 lldap_smtp_smtp_encryption: "NONE"
 lldap_smtp_user: "info@mgrote.net"
-lldap_smtp_enable_password_reset: "true"
+lldap_smtp_enable_password_reset: "true" # must be a string not a boolean
 # "meta vars"; daraus werden die db-url und die postgres-db abgeleitet
 lldap_db_name: "lldap"
 lldap_db_user: "lldap"
diff --git a/keepass_db.kdbx b/keepass_db.kdbx
index d393553b..049a1b3e 100644
Binary files a/keepass_db.kdbx and b/keepass_db.kdbx differ