- Enable registration with image CAPTCHA for spam protection. - Set USER/ORG_MAX_CREATION_LIMIT=0 so new users cannot create repos/orgs and thus cannot store code; issues/comments only. - Keep DISABLE_MIGRATIONS and push-create off. - Admin (petere) is exempted via per-user override in the admin panel.