diff --git a/machines/dev/vm02116/forgejo.nix b/machines/dev/vm02116/forgejo.nix
index 1db0be80..62e72300 100644
--- a/machines/dev/vm02116/forgejo.nix
+++ b/machines/dev/vm02116/forgejo.nix
@@ -17,6 +17,7 @@ in
     lfs.enable = true;
     settings = {
       service = {
+        # FIXME: enable sign-up after scoping secrets, see #335
         DISABLE_REGISTRATION = true;
       };
       server = {